This video demonstrates how to use conditional access to force MFA on Role admins on Office 365 /Azure.

MFA for Role Admins using Conditional Access
Aug 31 2020