Your Google admin should follow the steps described in the article Setting up G Suite service account.

Important! When configuring domain-wide delegation in Google Admin Console specify the following scopes: emailhttps://www.googleapis.com/auth/calendarhttps://mail.google.com/https://www.googleapis.com/auth/contactshttps://www.googleapis.com/auth/tasks.