For the Admin SDK access for accessing active Organizational Units and Groups to work using a Service Account, a Google Account with Admin Access is needed.
Enter an Administrator's Email here--note that the authority as implemented in the Google Admin Advanced Security page is for only read-only access to Groups, Organizational Units and Users.
