We’d like to grant some users, that are in a specific group, the right to remove the OTP from the Credentials-tab in Users; the users in this group should not be allowed to change passwords, and stuff in the Details-tab.
This is useful when a certain user has bought a new smartphone and is not able to check the old smartphone. In this case it is useful to remove the OTP, so a new QR-code is shown to the user.