As far as I can tell, you'll need to pull the group info from dsconfigad, then append the group/s, and then write it all back to dsconfigad. I don't see an append argument for dsconfigad.
If dscl's append argument can't write to the AD plugin, it might be easier to use the "defaults" command to...