One SSID, One VLan, One IP Pool, Restrict Access by Role

[jaden]

We have a requirement here.
Situation as below.

One SSID, One Vlan, One IP Pool.
Differentiate by Roles such as Role A can access between Role A, internet and internal.
Role B can only access to Internet and between Role B, means no internal.

Is there a way to do this?

Thanks.

[jaden]

Sorry of misunderstood, so NAC is called IAC now.
How do I use this to achieve the objective.

[Christopher_Dav]

Understandable, although it'd be an easier solution to manage without this. NAC is a solution. Well, IAC anyway. http://learn.extremenetworks.com/rs/641-VMV-602/images/Identity-and-Access-Control-DS.pdf This should be what you're looking for.

[jaden]

It's a coworking place and management wants it to be clean and easy.
Therefore, they wish to have only one ssid and single ip pool.
Wanted to do it using Extreme solutions like IdentiFI, NAC, Purview