A very good guide on how to configure your Aerohive wireless network to use RADIUS authentication to authenticate users against a Windows Active Directory, and setting network access (VLAN) based on their group membership:
http://boundless.aerohive.com/blog/how-to-configure-microsoft-nps-to-pass-user-profile-attributes-to-an-aerohive-ap.html
Send a link to this post to yourself or a friend.