[SSSD-users] Exclude users who will become root from SSSD control

Hi all, I have a requirement where my client is requesting to exclude all users who will become root (by sudo) out of SSSD control. The way I think it is possible is to not add those users into the sudo rule. Or create those users on the linux side and not keep them on AD at all. Has anyone encountered something like this? I am trying to gather information as to why they need this. In the meantime if anyone knows how to achieve this, it would be much appreciated. Thanks,