Dell PowerConnect W Clearpass 100 Software 3.9 Deployment Guide - Page 118

User roles can be used to apply different security policies to different classes of guest user accounts. For example, guest users, employees, and contractors might all have differing network security policies. The RADIUS attributes defined by a user role can then specify what each class of user is authorized to do. To create and configure user roles for the server to use for RADIUS authorization:  Go to RADIUS > User Roles. The User Roles list view defines the user roles for the RADIUS server and allows you to make changes to existing user roles. Each role is identified by a unique number. The ID is shown in the list view. When creating visitor accounts, the role_id field should contain the ID of one of the user roles defined in the RADIUS server. The RADIUS attributes for each role are shown in the list view. The icon displayed with each attribute indicates the type of condition attached to it:  The attribute is enabled and will always be included in a RADIUS Access-Accept message.  The attribute is disabled and will never be included in a RADIUS Access-Accept message.  The attribute has a condition expression that will determine if it is included in the RADIUS server's response. Creating a User Role To create a role that will be assigned to guest users: 1. Go to RADIUS > User Roles, then click the Create a new role link. The RADIUS Role Editor form opens. Figure 16 RADIUS Role Editor page 118 | RADIUS Services ClearPass Guest 3.9 | Deployment Guide