google also supports api keys, which are a way to use a service account to use an api, without futzing so hard with scopes (which, sometimes, is an exercise in futility).
when using an api key, instead of messing so hard with the scopes, each REST request appends a key query field, with the api key attached.