A network administrator is deploying MAB for IoT devices that cannot run a supplicant. They want ISE to authorize IP cameras, badge readers, and building sensors into different network segments based on device type. Profiling is already enabled and the endpoints are being profiled correctly. In the MAB authorization policy, what should the administrator reference in the authorization rule conditions so that each device category receives the appropriate authorization result?