Keycloak set group as resource owner

I am new to keyclay and am trying to use it as an auth server in my solution.

I have the following entity model: devices are owned by a specific company that owns multiple users . A user with a role administrator can grant permission to view a certain set of devices for a standard user, but only for those devices that belong to the administrative company. This way, all users except admins can only view a subset of all devices in the company. Based on the requirements, I decided to make the company a group and devices as keycloak resources . For evaluating permissions, I chose a rules-based policy.

Question: can I set a group as the owner of a resource to validate this relationship in a policy?

If anyone is more experienced with keyclay and knows how to best represent such a model, please help.

Thanks in advance.