Just a guess, but I would think it's transferable if you screenshot and send the QR code to a friend. An AC pass doesn't seem like the type of thing that AA would restrict, and I can't imagine IT would be sophisticated enough to know to reject it if the name on the BP doesn't match the account where the AC pass is stored.