diff --git a/devdocs/todo.txt b/devdocs/todo.txt
index fdb8feb2..9a1f48df 100644
--- a/devdocs/todo.txt
+++ b/devdocs/todo.txt
@@ -41,6 +41,10 @@ todo: Server ops EMAIL address for server to send health messages to!!!!
 todo: at server, should corebizobjects have an interface for them set in their model so that they can be identified as such	
 	- and then they can be forced to have the common attributes like searchableobject etc?
 
+todo: make a note: 2fa by role?
+	- by default all admin roles use 2fa?
+	- ops 2fa
+	
 DO CLIENT STUFF NOW COME BACK TO THIS STUFF LATER
 
 todo: add a post backup maintenance job (or very long periodic built in job that rarely runs) which does the following: