FortiAP with Radius Authentication

Dear FortiMasters,

I just want to seek assistance regarding my propose plan and I'm not really sure if our FortiAP able to achieve this.

I have Layer 3 switch configured with multiple vlans, one server acting as my Active Directory, DHCP, DNS and Radius Server as well.

Is it feasible using our FortiAP 220/221B I can broadcast single SSID and successful authenticated user/s will received corresponding ip addresses on which vlan they belong?

Let say user10 member of vlan 10 could acquire 10.10.10.x  and user20 member of vlan 20 could acquire 20.20.20.x lan subnet.

 Any guidance/best practice/recommended setup is much welcome and appreciated. 

PS; already read cookbook but its seems not similar to what Im going to achieve.

Regards,

Fullmoon