Each row is invited independently — different people can have different roles and teams. Master/Admin invitees will be prompted to set up 2FA on first login.