WLC9800 macfiltering for multiple SSID using Attribute List?

[eeebbunee]

Hello Professionals,

I'm configuring 3 SSIDs and those has same security conditions. (WPA/WPA2 - Macfiltering)
I would like to grant different connect rights for each devices. For example)
  - SSID: AAA
  - SSID: 123
  - SSID: 000

and there are 2 client devices.
  # Device-1: Only allow to access SSID-AAA.
  # Device-2: able to connect both SSID. (AAA and 123).
  # None of devices can't be access to SSID-000.

* Attribute List: 
  1) User_List: SSID - AAA
  2) Manager_List: SSID-AAA, SSID-123.

* Device authentication list:
  1) Device-1 : User_List - WLAN policy(user)
  2) Device-2 : Manager_list - none

Device-1 is able to connect SSID-AAA correctly, and working good.
However, none of SSID can be connectable for Device-2.

The attribute list has AND condition? not the OR condition?
How can I make multiple SSID accessible? 

When I use AirOS controller, I was able to set device can access only one SSID or All.
Does WLC9800 does same? 

Thank you for your comment.

[marce1000]

   - 'In general' , when things are not working as expected you can have a checkup of the controller configuration with the CLI command show tech wireless ; feed the output into : Wireless Config Analyzer

  When a client can not connect to particular SSID use client debugging according to https://logadvisor.cisco.com/logadvisor/wireless/9800/9800APJoin which you can have analyzed with Wireless Debug Analyzer

   You may also find this thread useful : https://community.cisco.com/t5/wireless/c9800-mac-filtering/td-p/4494040

 M.