With the Policy > SSID > User Access Settings > apply a different profile to user groups > create a user profile for certain devices/users and tick CWP Bypass (for instance we have an alexa device where the assignment rule is its mac address)
Is that what you were after?
