How to issue yourself a Temporary Access Pass without powershell?

Hello, we are a passwordless FIDO2 org. Now and then our helpdesk techs need to remote onto machines and log in with their standard user account.

Remotely the only option is password or TAP. Password won't satisfy MFA for SSO, and also won't utilize Entra Kerberos for some on-prem authentication, so a bunch of stuff breaks until they bring up a modern authentication box somehow.

I'd like it if the techs could issue themselves a 1 time use TAP. Would be preferable to do from the GUI as there won't be buy in if they have to use powershell and import modules, connect to graph, etc... for such a menial task.

But in the Entra admin console you are not allowed to view your own authentication methods for some reason.