This read-write boolean controls whether the switch applies an ACL name returned by RADIUS in an Access-Accept response, dynamically enforcing that access control list on the authenticated session. An administrator enables it when per-user or per-role ACLs should be pushed down from the RADIUS server rather than statically configured on each port. For example, enabling this OID lets RADIUS assign a restricted ACL automatically to a contractor's session based on their login credentials.