users.users.<name>.subGidRanges.*.startGid

Start of the range of subordinate group ids that user is allowed to use.