Temporary codes can be sent to users email address through the out-of-band option when logging into the VIP self-service portal or other 2FA integrated app.
Disabling this in VIP Manager policy will affect all users in the VIP tenant. Similarly, disabling PUSH notifications has the same effect.
VIP User Groups can be created and users added to the group(s) through LDAP synchronization. For example, if there is an OTP-Group1 these users can receive an OTP only (no PUSH), then another group PUSH-Group2 can be configured for PUSH only with no temporary security code.
The screenshot below below shows TESTING12 group configured with policies which will only be applied to this group when selecting Per Group Policy. Global policy will be in play when Per Account Policy is configured for that option. Select the Per Group Policy or Per Account Policy.