More of an LDAP/Open Directory question but I thought ya'll might be able to help: Deny OD Admin access to a specific group

I'm attempting to "Scope" out specific SSID's with our Meraki AP's and the wonderful Meraki support team sent me an AD helpfile that recommends creating two admins each that can only authenticate to their respective groups. Ex. Group SchoolStaff: User: StaffAdmin that can only authenticate the users in SchoolStaff Group SchoolStudents: User: StudentAdmin that can only authenticate the users in SchoolStudents.. I get the concept, I'm just not sure how to create an admin and deny said admin access to another group inside Open Directory. Any help would be greatly appreciated.