Disconnect device from SSID?

We're in the process of moving our WAP's for clients to Sophos Central. So far, so good.

We came across a situation where we needed to disconnect a device from a client guest WiFi SSID, but I am not seeing how to do that from Sophos Central.

What is the process to remove a device from an SSID immediately?

-Mike