Share the script project with the service account email’s + include the scope auth/drive when requesting the service account token