Hi! Seems this is the oldest discussion here without answer. Let's fix this.
I believe the following link should answer to your question:
https://sdwan-docs.cisco.com/Product_Documentation/Software_Features/Release_18.3/02System_and_Interfaces/03Configuring_User_Access_and_Authentication
To assign group to user you should use the following attribute:
Viptela-Group-Name
Please make sure to define dictionary first via Policy -> Dictionaries -> System -> Radius -> Radius Vendors -> Add.
After that define network device profile:
For that, go to Administration -> Network Resources -> Network device profiles -> Add and create profile for Viptela device (other) and select Radius Dictionary that you defined on previous step.
Now you can define your policies conditions and assign appropriate attribute as always.
