- In a non admin console, create an app, enable the google drive api.
- Under credentials, add a service account with option "Enable G Suite Domain-wide Delegation"
- Download the JSON file, add "subject": "email@example.com" to the JSON.
- Note the client ID https://console.developers.google.com/iam-admin/serviceaccounts https://console.developers.google.com
- Go to https://admin.google.com/
- Under security -> Enable GSuite access
- Security -> Advanced -> Manage API access: https://admin.google.com/AdminHome?chromeless=1#OGX:ManageOauthClients
- Add the client ID (obtained before) and a scope like https://www.googleapis.com/auth/drive.readonly.