An administrator configures a port on a RAP through the association of an AAA profile with 802.1X authentication to a RAP Ethernet port. This port connects to a switch with user desktops attached. The administrator notices that when users connect wirelessly to the RAP, a user role correctly restricts their traffic.
But, when users connect with their wired desktops, they have full access to corporate resources.
What must the administrator do to restrict desktop usage based on the users' role assignment?