Permissions required: Organization & User management --> Manage organization
The security section allows organization administrators to enforce MFA for all accounts in the organization, and define the time after inactive users will be logged out automatically.