You can either use the Tunnel-Private-Group-ID attribute to dynamically specify the VLAN the wireless user should be placed into: https://documentation.meraki.com/MR/Encryption_and_Authentication/Configuring_RADIUS_Authentication_with_WPA2-Enterprise#Supported_RADIUS_Attributes     Or you can create a Meraki group policies assigning whatever you want.  Then use the Filter-Id attribute to specify which group policies to assign to whatever users you want.   https://documentation.meraki.com/MR/Group_Policies_and_Blacklisting/Using_RADIUS_Attributes_to_Apply_Group_Policies  ... View more