The biggest difference is who manages the key.
- In Admin configuration, Administrator can manage all user's authentication key.
- In User configuration, users can only access their own key.
In case of device change or reinstalling Google Authentication, a new key must be received from Admin for Admin configuration, but a new key will be email for User configuration.