Next, authorize your service account’s client ID.
- In your Google Admin console, click SecurityAPI controls.
Under Domain-wide delegation, click MANAGE DOMAIN-WIDE DELEGATION.
On the Manage domain-wide delegation page, click Add new.
- Under Client ID, enter your service account's client ID.
Make sure you use the service account client ID, not the OAuth Web client ID. You can find the service account client ID in the JSON file you downloaded when you created the G Suite service account. Alternatively, you can find the client ID in the Google Cloud Platform Console. Click IAM & AdminService accounts, then select your service account.
- Under OAuth scopes, copy and paste the following comma-separated list of scopes:
- Click AUTHORIZE.
If you get an error, the client ID might not be registered with Google or there might be duplicate or unsupported scopes. The app should be available for use within an hour, but might take up to 24 hours.