As the administrator overseeing your company's identities within Google Cloud, you encounter a scenario where a user has misplaced their second factor for 2-Step Verification (2SV), necessitating access reset while minimizing risk. What is the recommended course of action?