Dynamic device group automation with GQL

I have a script that manages devices groups. The groups are simple, using a single rule, custom attribute SiteID = xxxx. Because the legacy API does not allow for the creation/application of the rules, I was directly manipulating the DB. 

We are moving to SAS - no more direct DB access. I need some GQL magic to create/apply a rule to a group.