Moving a host device from one vlan to another

Hello,

I'm currently working on my master thesis and I'm building a prototype of the system I proposed and I'm stuck on one step. Tried googling, haven't managed to find the solution.

The current setup is a Faucet SDN, which defines 3 VLANs, out of those 3, one of them is one that only has access to intranet resources. I want to move malicious hosts to the restricted VLAN until they fix their problems and still have the access to resources provided in the intranet. The problem is that I can't find a way to move the host. Is that even possible? Any kind of learning resources help