Excluding MFA for a user

[eeldivad]

Is it possible to exclude MFA for a user? I tried this ACL but it seems the MFA takes priority with the same route.

"Acls": {
    "Policies": {
        "*": {
            "Mfa": ["10.100.1.0/24"]
        },
        "testuser": {
            "Allow":[ "10.100.1.0/24"]
        }
    }
}

[eeldivad]

I need to setup a special service account user that runs in the background so it can't do MFA to access the same network