The documentation at https://www.cendio.com/resources/docs/tag-devel/html/config_shadowing.html describes a way to add groups as shadowers. This is not possible via Web Admin where only users can be added under VSM/Master -> Allowed Shadowers.