Jakub jumped to conclusion that this is for access control but it might be better to ask: what is the use case? IPA provides a host grouping mechanism but no software other than SSSD understands hosts and host groups yet. So what do you want to accomplish? Netgroups can also come over LDAP, this is what IPA is capable of. You are not required to use NIS server and protocol for netgroups.