You must enable the APIs required for Britive to read user, role, and group information from the Google Workspace . The APIs should be enabled on the project where the service account is going to be created.
Login to GCP Console with administrative privileges.
Enable the following APIs by clicking these links:
Directory Service: https://console.developers.google.com/apis/api/admin.googleapis.com/overview