LDAP - Role Search Filter

I have a project with AD integration, but it’s connected to a very large directory, and it appears that it is causing my designer session to lag. I’d like to try filtering for only the groups that require Ignition access, but am not sure how to apply the filter. I’ve found instances in other applications where a memberOf=cn=usergroup,ou=users,dc=domain filter is used, but it looks like Ignition has the memberOf attribute mapped to the role, so I imagine that I need to use the ‘role search filter’ instead?

What is the syntax for this? I see the default is (objectClass=group), do I append to that? Will there be an issue if they have spaces in the AD group names?