Individual admin can go to the marketplace and create their own JWT app for their specific accounts, but the master/enterprise account (or super admin) has access to all accounts underneath the organization. I hope this makes more sense.
You should not experience this issue. The refresh token should work. What error are you seeing?