Do the following :
1- Uncheck the trusted so this way the user has to authenticate (Make sure you use anything but ethernet interface 0 , this is use for the uplink) , then you can assign the VLANs in there as well.
2- And then assign the aaa profile you want to use to authenticate the user against