domainPolicy — App cannot be used within the authenticated user's domain

This error means the Google Workspace domain admin has blocked your app. No API call can override this. Use Riposte to detect the error (Riposte will return a 403 with domainPolicy). Then inform the user that an admin must enable API access for the app. Until then, you should pause or disable the account (use /accounts/{accountId}/pause) to prevent further attempts.