hi Jer,
You should be able to do this either with a dot1p or ToS marking session acl. Consider the following contrived example for ToS based on IP and not port (you could add tcp 12345 if you know the SCCM ports explicitly, but probably IP is enough)
netdestination SCCM
host 1.2.3.4
host 5.6.7.8
!
ip access-list session sccm_tosmarker
user alias SCCM any permit tos XX
alias SCCM user any permit tos XX
!
Then shove that access-list somewhere into the user role as appropriate.
Seems the values are hidden behind n/a these days, but you can find them in a doc like the Lync VRD (Link), essentially we get the following
DSCP dot1p
BK 8 1,2
BE 24 0,3
VI 40 5
VO 56 6
as the default value the ssid profile uses. As usual with ToS vs. DSCP there is some overlap and variation in what the numbers mean and how to enter them, but I digress.
The key thing to remember is that the ssid-profile dscp values are range based. Try very much to resist the urge to change them, often it results in unexpected results, instead set a value of XX above that falls into the range.
Aruba's docs don't clearly imply the range nature of these, but you can search around online for "dscp to wmm ac mapping" (for example this) to see that it's pretty standard behaviour. As such, you don't have to pick the exact value to match a well known DSCP value, but it probably is best to do so.
TL;DR; Thus, you should put a value of 8 in for XX above, or, use a dot1p marker with value=1
Finally, once you think it's all setup and ready to go, kick off an update to a client and use 'show acl hit' to make sure it's getting pinged, and, "show ap debug radio-stats ap-name <> radio <> advanced | include WMM" (naturally you will need to find the ap-name and radio (0=5ghz,1=2.4ghz) depending on where your test client is at the time)
you should see this stat going up rapidly due to your now BK prioritised traffic
Tx WMM [BK] 125123 <<<<
Tx WMM [BE] 125
Tx WMM [VO] 55753
then of course double check it with a quick pcap to make sure the outer IP header is really set as you need it to be.