Google Directory API: 403 when update user with service account

Question

I\'m using Service Account with Domain Delegation(https://developers.google.com/admin-sdk/directory/v1/guides/delegation) I can create, delete, and list users, but when I ex