When you configure wi-fi policy in RADIUS server (NPS), you configure the authenticated groups scope in Condition tab:
Create a custom group, say, "Wireless Users" and add allowed users to that group. Set this group in NPS policy as shown above.