Ok i see the following in the reply
Role Derivation: default for authentication type 802.1x
then
Role assigment - L3 assigned role: n/a, VPN role: n/a, Dot1x cached role: n/a
Current Role name: guest, role-how: 1, L2-role: guest, L3-role: guest
My AAA profile is set for Logon. I have looked at the 802.1x seetings but do not see where to assign the role. I am using mschap for 802.1x.