It is not a feature of the captive portal but of OPNsense, you can do this by assigning privileges to the user.
Go to System: Access: Users
"Effective Privileges"
GUI System: User Password Manager
Follow image....
Go to System: Access: Users
"Effective Privileges"
GUI System: User Password Manager
Follow image....