I don't think that's an option. Import is mostly used by administrators with a certain level of trust; and for large amounts of devices. For the non-privileged users, the import is mostly disabled/removed.
You may consider using the API if you want to do this at scale and build your own application that enforces your custom restriction.
Maybe TAC knows a way around this, but while the granularity in ClearPass Guest is really high, this may be too high.
------------------------------
Herman Robers
------------------------
If you have urgent issues, always contact your HPE Aruba Networking partner, distributor, or Aruba TAC Support. Check
https://www.arubanetworks.com/support-services/contact-support/ for how to contact HPE Aruba Networking TAC. Any opinions expressed here are solely my own and not necessarily that of Hewlett Packard Enterprise or HPE Aruba Networking.
In case your problem is solved, please invest the time to post a follow-up with the information on how you solved it. Others can benefit from that.
------------------------------