An admin of an account has access to the authentication tokens of all users, whether they were shared or not.