I've enabled the relevant APIs:
[*] 26) Gmail API - Basic Settings (Filters, IMAP, Language, POP, Vacation) - read/write, Sharing Settings (Delegates, Forwarding, SendAs) - read
[*] 27) Gmail API - Full Access (Labels, Messages)
[*] 28) Gmail API - Full Access (Labels, Messages) except delete message
[*] 29) Gmail API - Full Access - read only
[*] 30) Gmail API - Send Messages - including todrive
[*] 31) Gmail API - Sharing Settings (Delegates, Forwarding, SendAs) - write
I've sent the GAM link and advised the approver on these steps: You will be directed to the Google Workspace admin console Security > API Controls > Domain-wide Delegation page
The "Add a new Client ID" box will open
Make sure that "Overwrite existing client ID" is checked
Click AUTHORIZE
When the box closes you're done
After authorizing it may take some time for this test to pass so wait a few moments and then try this command again.
After 30 minutes I run gam user us@domain add delegate end@domain. I get the error: Gmail API Service/App not enabled