Per Port Initial Role

Use the command aaa port-access <port-list> initial-role <role-name> to configure initial role at per port level.