Hi James I issued a request for a similar implimentation, as this requirement came up at a private school here in South Africa. The issue at the moment, as you've mentioned, is that the policy is applied to a port. In wireless terms, this obviously means that an entire SSID will be impacted. As per the guys in Salem, a rearchitecture of PCC will be required to allow admin users, or tachers in this case, to apply role based policy through PCC. I've recommended a temporary workaround in that, teachers can change the group membership of a given student through the OneView GUI. It's not perfect, but fairly simple and equally effective. Please let me know should you hear or come up with any other suggestions. Kind Regards Francois