VLAN commands
NOTE:
The VLAN must be configured on the switch at the time the user role is applied. Only one of VLAN-name or VLAN-ID is allowed for any user role.
Modification of the VLAN will force users assigned to that VLAN via a user role to be deauthenticated.