You should be able to use an LDAP v3 URL which includes an LDAP filter to filter the results of your LDAP query:
ldap://host:port/dn?attributes?scope?filter?extensions
where filter could be (memberOf=<adgroup>).
Check the Managing LDAP Operator Authentication Servers section of the ClearPass Guest user guide.