Add webserver "apache" user to other groups

Isn't this default behaviour? It is the same as having some samba accounts, then enable PAM on a server and create more samba accounts. Only the new accounts will have PAM access (local accounts)