diff --git a/docsfera.json b/docsfera.json
index fc85ccf..1b92192 100644
--- a/docsfera.json
+++ b/docsfera.json
@@ -5515,6 +5515,9 @@
             {
               "access-token": []
             },
+            {
+              "access-token": []
+            },
             {
               "access-token": []
             }
diff --git a/src/authentication/permissions.enum.ts b/src/authentication/permissions.enum.ts
index 1e01531..95a313f 100644
--- a/src/authentication/permissions.enum.ts
+++ b/src/authentication/permissions.enum.ts
@@ -612,7 +612,8 @@ export interface DadosferaModule {
 
 export const DADOSFERA_MODULES_KEYS = {
   LOG_DASHBOARD: 'logs-dashboard',
-  ACCESS_DASHBOARD: 'access-dashboard'
+  ACCESS_DASHBOARD: 'access-dashboard',
+  DANGER_ZONE: 'danger-zone'
 }
 
 export const DADOSFERA_MODULES: Array<DadosferaModule> = [
diff --git a/src/modules/customers/customers.controller.ts b/src/modules/customers/customers.controller.ts
index f9f89dc..bcab557 100644
--- a/src/modules/customers/customers.controller.ts
+++ b/src/modules/customers/customers.controller.ts
@@ -45,6 +45,7 @@ export class CustomersController {
   @Post(':id/mfa')
   @Authenticated()
   @RequireSomePermission(PERMISSIONS_GROUPS.USERS.permissions.ADMIN)
+  @RequireModule(DADOSFERA_MODULES_KEYS.DANGER_ZONE)
   async enableMfaEnforce(@Param('id') id: string, @Body() data: EnforceMfa) {
     this.logger.info('enableMfaEnforce', { id });
     return await this.customersService.enableEnforceMfa(id, data.enabled);