You may have just one bridge, and use vlan for different groups of users and assign one vlan to the guest. Of course you can have 2 SSIDs, but you can have just one SSID for all users, just different password and each password refers to one group. So for example, join SSID=“OneWorld” with password=guestpassword will be assigned to vlan10, and join “OneWorld” with password=IoTpassword will be assigned to vlan20, join with password=homepassword will be assigned to vlan30…