RSSO - WiFi and VPN user in more groups

[vajkooo]

Dear, 

I would like to ask you for help with my problem.

We have fortigate 80E at our client and we want to setup RADIUS for VPN and for internal WiFi. We setup two NPS policy:

[ol]

if user is in VPN group contition 

if user is in WiFi group condition[/ol]

But if user is in both of gorups then there is problem that first match policy applied. It means if I’m in VPN and WiFi group then I try connect to wifi and first policy is VPN then the policy deny access to Wifi. 

I tries add more conditions like IEEE 802.11 etc, but it doesn’t work. 

If I try connect to VPN and the policy is first it works properly same situation with WiFi.  

Could any help me what is correct way if  I have users which is both of the groups?

Thank you and have a nice day.