This is possible by using the getAccessToken mutation which takes access token, refresh token, and target org as an input.
getAccessToken
You will be able to get a new accessToken in the context of that customer.