We can't make reseller API calls working using a service account. The steps on the link:
were followed without any luck.
With regards
When performing service account authentication against the directory or reseller API, you must impersonate a Google Apps user within the instance who has the proper permissions to make the API calls. This is done via the prn parameter as described in the service account documentation. How you specify the prn user will differ by client library.