so I take it that all your APs across your 100+ sites are in one group?
for AOS10 APs, your only option is to do this at group level configuration , which means that moving the specific APs in that site to their own group, otherwise you need to use API or individually disable the guest SSID
------------------------------
If my post was useful accept solution and/or give kudos.
Any opinions expressed here are solely my own and not necessarily that of HPE or Aruba.
------------------------------