In JetBrains TeamCity prior to 2020.2.1, the server admin could create and see access tokens for any other users.
jetbrains teamcity