I havent tested it yet, but it might works.
- Assign VLAN to the port
- Make the port untrusted
- Open VLAN config
- select wired-aaa profile to whatever you need
For the aaa profile, check the initial and authenticate role, assign the correct bandwith contract
Goodluck.!