The caller does not have permission 403 on PubSub Registration

Question

Using a service account. Domain wide delegation set up, with the correct scopes (https://www.googleapis.com/auth/classroom.courses.readonly and https://www.googleapis.com/a