For you case, you may need to choose "contains" to put in the mac adress of the AP`s BSSID to take care.
Here are the list of condition we have..
The purpose of having this option is to optimize and for flexibility. Say for example " you have the specific list of device "oui" wants them on specfic role; you may needs to choose the conditions "starts with" where all the devices ,matching or starting with that specific OUI will be placed on the role appropriately. Similarly if you want the exact match of mac address you may need to go for "equals". These options basilly gives us more customization to define the rules.
(Aruba) (user-rule) #set role condition bssid ?
contains Check if attribute -contains- the operand value
ends-with Check if attribute -ends-with- the operand value
equals Check if attribute -equals- the operand value
not-equals Check if attribute -not-equals- the operand value
starts-with Check if attribute -starts-with- the operand value
Thanks!