So, you want us to do your homework?
Ok, the problem is not related to Meraki. It's all on the RADIUS server.
When the request comes in you need to compare the SSID to the user account. If it's a student and the SSID is "Staff", send an access reject. Same if it is Staff-member connecting to the "Student" SSID.
If you found this post helpful, please give it Kudos. If my answer solves your problem, please click Accept as Solution so others can benefit from it.