You should be able to accomplish this .
If you already have your mesh link up and running the all you need to do is create a eth port config / wired ap and make the forwarding mode be bridge or split tunnel and apply the aaa profile with the assigned user-role already created and the VLAN those ports will use