Grant Service Account API Access

1. Log into Google Admin with the same Google account.
2. Go to Security > API Controls, scroll down and click Manage Domain wide Delegation.



3. Click Add new to authorize the registered client to access your user data.



4. In the Client ID field, enter the Client ID saved from Configure Service Account. Your Client ID must be a string of numbers.



5. In the OAuth scopes field, enter:

"https://www.googleapis.com/auth/admin.directory.user,https://www.googleapis.com/auth/admin.reports.audit.readonly".