For the purpose of VPN access control, it is a common requirement that the VPN server asks the RADIUS server to return a user's group membership in a RADIUS attribute.
This guide describes how to return the list of groups the user belongs to in a RADIUS attribute.