A very good guide on how to configure your Aerohive wireless network to use RADIUS authentication to authenticate users against a Windows Active Directory, and setting network access (VLAN) based on their group membership:

http://boundless.aerohive.com/blog/how-to-configure-microsoft-nps-to-pass-user-profile-attributes-to-an-aerohive-ap.html