Question is not clear, let me know if my understanding is right.
You want to block client on one specific AP (all SSDs), but allow on rest of the APs?
You want to allow him on one AP (all SSIDs) and block on rest of the APs?
AFAIK, ZD ACLs are supported per WLAN basis, not per AP basis, so this may not be achievable but specify the query and we will see if it is possible.
Syamantak Omer | Community moderator | Staff TSE | CWNA | CCNA | RASZA | RICXI | Follow me at https://linkedin.com/in/syamantak-omer-5949b6124