This document explains how to use the Manifest service to add domain administrators for a given Office 365 domain.
Note: sometimes the group will be in "Groups I manage"