Disable TOTP unenrollment

Hi,

is there a way to limit a user to perform enrollment of a TOTP only and disabling un-enrollment ?

Let's say I want to allow TOTP enrollment and disable all other operations, so that the user cannot unenroll its totp, email otp and ldap authenticato.by his own.