I'm not sure about 'no native concept', because in a domain environment, that is meaningful (as in can be set in the Active Directory Users and Computers mmc).

You could say something like, "Puppet only supports managing local user accounts, and the primary group is strictly for domain accounts, therefore Puppet does not manage it."