Thank you for your response. Sorry for the delay in getting back to you. Ideally, we would want the parent site to see all subsite roles. Since the plugin is installed on the network and mainly affects the parent site, I would think that would be the best setup. Currently right now, we are using Custom Role Editor plugin. I created about 6 different roles, and maybe 4 or 5 would need to have the 2FA linked to them. The other roles would not have access to the backend at all.
Let me know your thoughts and what you could do. Thanks.