Yes, it is possible. I have several options.
Using two groups as you suggest.
Having cluster specific vlan setting as you will have two Instant clusters.
Have site specific vlan setting in the user role.
Use role derivation rules to select correct user role / vlan per site.
Maybe go with user roles?
Best, Gorazd
------------------------------
Gorazd Kikelj
MVP Expert 2023
------------------------------