addgroup.8 --disabled-password
add a user or group to the system
--disabled-password
       Like --disabled-login, but logins are still possible (for example using  SSH  RSA  keys)  but  not
       using password authentication.
source manpages: addgroup