I do have Guest Wifi APs in the elevator lobby on each floor and community spaces, but not down the hallway.
The more I think about this the more I’m rethinking my goals. In all honesty, what I’m trying to do is establish a building wide wifi network that is unique to each user (which is different than my original question / post). I envision the tenant walking into the building and having wifi in all areas of the building. From the main lobby to the halls to the unit. The tenant in Unit 201 would be on vlan 201 everywhere. When the tenant goes into the unit they can connect their wired devices to any one of the 4 LAN points in each unit (which would be on vlan 201) and they can connect their wireless devices to the WAP in their unit on vlan 201. The wireless connections within the unit (from a printer or TV) should not use a captive portal. They need a SSID and PW.
Herein lies the rub. I think I can assign vlan 201 via captive portal when the tenant walks into the building. They can roam everywhere as expected on vlan 201. However, when they get into their unit, how do they connect a wireless printer or TV over the captive portal? They would need a std SSID / PW on vlan 201. That then requires 52 SSID on all WAP, which is why I was thinking WLAN Groups instead…
Maybe this problem is beyond the capabilities of Unifi and I need to change my requirements Public Wifi in common areas only and wifi in the units that cannot roam.
I know AT&T and others have some managed building wifi system that allow this. I wonder how they do it.