As @ww said, group policies are the way to do this.
You can assign it manually to the user's device via the dashboard, or by integrating with an authentication mechanism such as Active Directory, RADIUS Attributes or iPSK.
Get notified when there are additional replies to this discussion.