Your Google admin should follow the steps described in the article Setting up G Suite service account.
Important! When configuring domain wide delegation in Google Admin Console specify the following scopes: email, https://www.googleapis.com/auth/calendar, https://mail.google.com/, https://www.google.com/m8/feeds, https://www.googleapis.com/auth/contacts, https://www.googleapis.com/auth/tasks.