Hello Liza,
if you onboard a new AP the AP will send the traffic untagged to the switch. So it doesn't matter which vlan is on the port to the AP it just has to be untagged.
The native vlan must match the native vlan on your switch but you do not need to use the native vlan and you can change it later if you want. If you want you can tag all user traffic to different vlans. For the onboarding the native vlan is not necessary.
The management vlan is for CAPWAP, SSH and other management traffic.
Regards
Stephan
