They are added to and emailed a temporary password. They choose their own at first sign-in. The shop is taken from your account and cannot be changed here.

The token is shown once, right after creation. Copy it into the partner system's configuration immediately — it cannot be retrieved again, only revoked and replaced.