Your Google admin should follow the steps described in the article Setting up G Suite service account.

Important! When configuring domain wide delegation in Google Admin Console specify the following scopesemail, https://www.googleapis.com/auth/calendar, https://mail.google.com/, https://www.google.com/m8/feeds, https://www.googleapis.com/auth/tasks.