System Administration Guide: Naming and Directory Services (NIS+)

NIS+ Member Types

NIS+ groups also accept nonmembers in all three categories: explicit, implicit, and recursive. Nonmembers are principals specifically excluded from a group that they otherwise would be part of.