I have the same / similar issue, I have a per user policy at the moment due to there only being 40Mbit bandwidth on the internet pipe.
I am upping this to 500Mbit and now I want to limit only AP-Groups that are running over 10Mbit WAN links.
Anything that runs on the local LAN to the 500Mbit internet pipe I want to give a lot more bandwidth, say 10Mbit per user.
The problem i have is that the entire estate runs on predominantly the same SSID's for Public and Private and the user role is the same accross the entire estate so if I up the limit to the user role it will affect the WAN links.
I didnt want to have to create different SSID's and user roles for WAN and LAN so was hoping there was a way to apply a AP-Group bandwith policy so that my WAN ap-groups are set at the same level they are now and the LAN AP-groups are given the new 10Mbit limit per user.
Any ideas?