Configure GSuite integration without domain wide delegation?

[captain135]

The Dispatch setup instructions for GSuite say to enable domain wide delegation

https://netflix.github.io/dispatch/docs/administration/settings/plugins/configuring-g-suite

The problem is domain wide delegation allows Dispatch to perform drive/mail/calendar actions on every user account in a GSuite org, which is a huge amount of over-access.

Is there a way to configure it to be limited to only a single user account in GSuite? Seems like it should be possible with OAuth
https://developers.google.com/workspace/guides/create-credentials#oauth-client-id , but unclear on what to add as URIs.

Any guidance greatly appreciated!