diff --git a/roles/httpd/tasks/install.yml b/roles/httpd/tasks/install.yml
index 861f5ee0f..1540a4cfc 100644
--- a/roles/httpd/tasks/install.yml
+++ b/roles/httpd/tasks/install.yml
@@ -100,13 +100,11 @@
 - name: 'Create group: admin'
   group:
     name: admin
-    state: present
 
-- name: Add user {{ apache_user }} (from variable apache_user) to group admin
+- name: Add user {{ apache_user }} (from variable apache_user) to groups admin,shadow
   user:
     name: "{{ apache_user }}"
-    groups: admin
-    state: present
+    groups: admin,shadow    # 2020-06-04: shadow nec for Admin Console login (this line had been clobbering user www-data's membership in group shadow, as set earlier by nginx/tasks/install.yml, SEE #2431)
     createhome: no
 
 - name: Create Apache dir /var/log/{{ apache_service }} ({{ apache_user }}:{{ apache_user }})