Restrict Approver for Guestpass to Specific Radius Group

unknown

Using Zone Director with Cisco ISE for my Radius server.  Have successfully made email guestpass authentication work, but what I need to now do is not allow 'all users' to be able to approve and authenticate guests using the guest pass, but restrict it to a specific group of users (for example, we only want Managers to be able to approve guest passes, not all employees).  Have figured out the Radius settings and have it all connected and working, but want to restrict the guest pass authorization request by group, don't see anywhere in the Radius settings in the Ruckus to validate group membership... is there a way to do this through the Ruckus ZD settings for Radius or GuestPass authorization?