Found a reasonable solution for my specific use case thanks to @dazwilkin - I can share a document or folder with a service account through its email in the same way I would share with a human. Other use cases might require domain wide delegation.