Settings › users. Rotate key is on each person's row, except a sub-company login, which has no key. Company admin or owner.
Rotate key is on the row. It replaces the script key for that person. It does not change their password and it does not sign their browser out. Invite a teammate is how the row got here. Require an authenticator for a person is the other control on the same row.
The label turns into confirm: new key. Press it again to replace the key. The new key is shown once on this page. Copy it into the script that needs it, then leave the page. It cannot be shown again. The old key stops working immediately. This shot stops before the second press, so no key was created.
Creating a person also shows a key once. That is Invite a teammate. The key cannot open the screen, delete a file, or start remote control. Those stay with a signed-in person.