We have separate Students, Staff and corporate devices SSIDs with different IP ACLs on each. We could combine these all into a single WLAN if we had the ability to specify an ACL profile with the RADIUS response. This is something that Ruckus can do as they have a custom RADIUS attribute which we can use to map to a group with ACLs.
This combined with the existing ability to assign VLANs via RADIUS would make our WiFi infrastructure much simpler and more efficient.