So in my opinion doing this the way you're asking is difficult to manage, but not impossible. For Meraki, you would basically need a Group Policy for every user that specifies their respective VLAN. You can also add some L3 rules into the GP that allows them to the printer VLAN, but not other user VLANs for example. Every time you get a new user you create a new GP, and update your user DB to return the proper fields when that user hits the WiFi via RADIUS. But, I would suggest you just use a single VLAN and use features like Deny Local LAN, Wireless Client Isolation, and MR firewall rules to isolate clients. https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/'Deny_Local_LAN'_settings_in_Cisco_Meraki_MR_firewall https://documentation.meraki.com/MR/Firewall_and_Traffic_Shaping/Wireless_Client_Isolation This approach negates the need to manage a large number of VLAN, ans MACs related to people coming and going from the organization.
... View more