Taking a shot in the dark here because one, I don't have Cisco WLCs anymore and two, I don't have Clearpass but I believe you can do this with AAA override.
You will need to configure Clearpass with the correct RADIUS VSAs and instead of sending a user-role in the enforce profile you would send the VLAN or ACL name.
At Aruba, we believe that the most dynamic customer experiences happen at the Edge. Our mission is to deliver innovative solutions that harness data at the Edge to drive powerful business outcomes.
© Copyright 2021 Hewlett Packard Enterprise Development LPAll Rights Reserved.