module-user/manifests/groups/sftponly.pp

# manifests/groups/sftponly.pp

class user::groups::sftponly {
  group{'sftponly':
    ensure => present,
    gid => 10000,
  }
}