User-specific L3/4/IP access control policy when using ZD1200 & NPS/IAS RADIUS auth in AD

unknown

I have ZD1200-based wireless network with R700 access point. I have EAP-TLS WLAN and PEAP WLANs and use Microsoft NPS as RADIUS server and users & computers in Active Directory and everything works fine.

I'd like to use different L3/L4/IP access contol policies depend on user/computer or AD group in same WLAN. Could someone to guide me? Is it possible?