How to add addon app user to groups

We use an Atlassian group to manage user access to restricted pages. Is there a way to add the app user of a Connect app installed by the Confluence admin to that group, so it can get access to all the restricted pages?

If that is not possible, what is the recommended way to allow a Confluence addon (with READ and ADMIN scopes) to get access to all current and future restricted pages?