Looks like you've identified how to edit/create groups. That is where you will add members to the groups for applying to policies.
Web protection works slightly different than Email Protection when it comes to policies. In the Control Console, the SaaS Policies are applied under Web Protection > Policies > Policy Scheduling. You will have to subscribe your group(s) to the applicable policy there.