Netgroups.... NIS, you mentioned it being outdated.
NIS != Netgroups Netgroup is just a table (just like passwd or
group) to be provided either via files, NIS or sssd.
But yes, it is maybe somewhat outdates, too. You could probably
achieve the same results using different ldap containers for
users...