Where to put EAP-TLS-Require-Client-Cert = Yes ?

Hello, I would like to ask client to provide certificate during TTLS. I saw in eap.conf that I have to set EAP-TLS-Require-Client-Cert = Yes in the contol items for a request. Does this mean that I have to set this in my users file for the user entry that interests me? Could you provide a little sample of how to be used this setting? Thank you! Cristian Novac.