In case of user group gets assigned which has an LDAP configured (or it's configured globally), it's visually asking to fill up the password field.

Expectation:

When there is a user group selected which has an LDAP configured behind then it removes these red stars.