An administrator implements a split-tunneling policy for a VAP. The split-tunneling policy should only be used by Remote APs (RAPs) at the branch offices and not campus APs at the corporate office…

An administrator implements a split-tunneling policy for a VAP. The split-tunneling policy should only be used by Remote APs (RAPs) at the branch offices and not campus APs at the corporate office. When the administrator references the split-tunneling policy in the user role, which component should the administrator define to ensure that the split-tunneling policy is only used when a user is associated to a RAP?