VLAN Setup Clarification

I hoping you all can help. I'm still trying to grasp the concept of VLANs and am having a mental block.

We have 5 UniFi APs, several switches, and a DHCP server. We are wanting to setup a new SSID on it's own subnet and VLAN so they can't access anything but internet but still get an IP for the DHCP. Lets say, it'll be VLAN #30.

So, in its simplest terms, any port switches that the VLAN passes through to get to the DHCP need to be tagged with VLAN #30, correct?

So, say its something like this:

• AP is configured with new SSID associated with VLAN #30

• AP connected to Switch 1 Port 10

• Switch 1 Port 20 connected to Switch 2 Port 30

• Switch 2 Port 40 to DHCP Server

So, switch 1 port 10, switch 1 port 20, switch 2 port 30, and switch 3 port 40 all need to be tagged with VLAN #30.

Is that right or am I way off base?