The shadow group allows system programs which require access the ability to read the /etc/shadow file. No users should be assigned to the shadow group.