If you can have your RADIUS server return the age in the
Fortinet-Group-Name attribute, that would make things very simple. Once
that's done just create user groups on the Fortigate that match on your
radius server + group name and apply those groups...
