On the settings sub-page IP Whitelisting, you have the option to give users the right to access your backoffice environment without using the 2-factor-authentication, given that they sign in from a whitelisted IP address.
There's no limit on how many IP addresses you can whitelist, and you can of course remove the whitelisting from any IP address if you wish.