The supplied directory admin email is a google service account email (identified with having `iam.gserviceaccount` in the domain). This should have been a user from Google workspace 

Either supply an existing user from the Google Workspace that has the necessary permissions OR create a new user under that google workspace with the necessary permissions and supply that email instead.