I found the answer myself. It is not possible in the Google Cloud Console. The permission needs to be given in the [Google Workspace Admin Console](https://admin.google.com/).
Go to the Admin Roles and assign an admin to the Groups Admin:
The next screen will show an option to add a service account and use the email address of the service account (in my example above [email protected]):