A company has an Aruba solution with a guest WLAN named exam_guest. A network administrator creates the guest WLAN with the wizard and does not change any of the default roles. The authentication server does not send particular role assignments for authorized users. The company wants to deny guest access to specific IP rnages after the guests authenticate.

For which role should the administrator create the rule to deny this traffic?