Yes, a user typically has the ability to disable MFA for their account. However, it is generally not recommended as it weakens the security of the account and businesses may want to consider this on a case-by-case basis only.