I cannot seem to find an answer to this in the documentation, in zone director this was much more clear-cut than smartzone:
In smart zone, which Firewall Profile setting takes precedence, WLAN Firewall Profile & limits or User Role Traffic Profile...