photo = vk_session.method('photos.get', {'owner_id': -…, 'album_id': …, 'count': 1, 'offset': 0, 'access_token': "токен пользователя" })
vk_session = vk_api.VkApi(token='access_token')
api = vk_session.get_api()
photo = api.photos.get(owner_id=..., count=...)