Your Google admin should follow the steps described in the article Setting up G Suite service account.
Important! When configuring domain-wide delegation in Google Admin Console specify the following scopes: email, https://www.googleapis.com/auth/calendar, https://mail.google.com/, https://www.googleapis.com/auth/contacts, https://www.googleapis.com/auth/tasks.