Google Cloud and GSuite integration


I have an application which needs to access and modify Google Sheets. I would like to use the Google Cloud secrets engine to manage OAuth tokens, however I am confronted with a problem: Access to GSuite products (such as Sheets) requires that the service account be explicitly added to the ACL, but since service accounts are generated on-demand by Vault, they are never added. What’s the best way to proceed?