The biggest difference is who manages the key. In Admin configuration, Administrator can manage all user's authentication key. In User configuration, users can only access their own key. In case of device change or reinstalling Google Authentication, a new key must be received from Admin for Admin configuration, but a new key will be email for User configuration.
