ClearPass creates an automagic TIPS role for Machine Authenticated devices.
In your enforcement profile, create a condition that says "Tips:Role EQUALS [Machine Authenticated]" and then assign an enforcement profile(s) to take the appropriate action.
There is also a TIPS role called [User Authenticated] which you can use the same way.
