I think you need a fancier router to do this properly. But I feel like I remember ASUS has a way you can assign IP addresses to certain devices (likely after they are assigned), and then toggle their internet access. But this only works with devices already connected to your network. I don't think those routers can do VLANs or control multiple SSID's with different settings. But this isn't always going to work with modern devices. I noticed my iPhone masks its MAC address for wifi somehow. It shows up as a different device from time to time.
I'm confused though. If you don't want wireless devices having internet access, why connect them to your wifi at all? Also, if you don't want wired devices having access until you approve them, don't let them plug in a wire maybe??