I have a captive portal from my employees to use AD accounts on. I used the service template for guest access with mac caching to build the service and cash the mac for one month for employees. When an employee logs in to the wireless clearpass authenticates them with AD successfully but it is sending back the guest user role to the controller and not employee role that I specified when creating the service. this employee role also exists on the controller.. I guest the questions is how to make clearpass assign the (GuestUser:Role ID EQUALS 3) and not (GuestUser:Role ID EQUALS 1) to my employees?