/usr/sbin/dseditgroup
dseditgroup allows manipulation of a single named group record on either the default local node or the specified DirectoryService node.