create a username based role mapping rule and mention * as user name in the role mapping rule and and select the roles to which you want to map the users to. this will map all authenticated MAC addresses to the selected roles. ... View more