Typically MSPs like cognizant we'll have access to the group passwords. But even if not, and admin can reset and create a new password at any time. Takes a few seconds to do so.
And cognizant is going to have a dozen clients that a single person responds to it anytime