Well,
That is basic understanding of VLAN's.. 😉
If you use 'access' on the port, the devices on the port will not see the VLAN as a VLAN, they will see it untagged (aka VLAN 1).So your SSID should then use VLAN 1..
It is, though, a bad idea to make the management VLAN available on a SSID, unless you only need it to access management.
The best setup, is using a trunked port, where:Native/untaggeg/Access is allowed to be used by client devices, should one such try to connect, and you have DHCP option set to tell the AP's where your controller is, which should be reachable on the subnet.Have management on a VLAN, that the AP then switch too when it get's the setup from the controller.Have all other SSID's on their own VLAN(s).
Hope it helps.