Unless you want to give them PowerShell access, you don't.
Having a Security Group as Owner allows members of said group to skirt things like message approval and such, but they will not be able to manage it that way.
"they don't show up in the Exchange Admin Center for end users"
That's probably for the best, though. We blocked regular users from accessing these pages via CA long ago.
