Reference this original question that was closed: Can't add local user on system using ldap auth for samba
I had the same problem. We are creating a jump host that has some local users, and the rest are in ldap. The user ids are the same between local and ldap. This is mainly because our team doesn't manage Active Directory, and we want to use ssh keys for some users. So we will add those users locally (with same uid and gid as in AD) but with the addition of the key. We weren't able to add the users because it does a lookup first and finds them in ldap.
We are also trying to minimize user impact, so disabling sssd for the time required to add the user was really not an option.