Michael,
To add on to cappalli's comments, whether the role(s) are statically defined in the switches configuration or dynamically sent down via ClearPass, the ACLs are pushed down into the ASICs of the Mobility Access Switch. You can have multiple devices using different roles on a single port and they will be independent of one another.
Best regards,
Madani