How deeply does Authorization in Action cover managed device?

Explains layered policy evaluation and signed posture verification, but stops short of device-fleet management procedures.

Managed device

As explained in Authorization in Action

A managed device is a device whose security state and configuration are administered and verifiable by an organization.

A managed device is one whose security state and configuration an organization administers and can verify. In access decisions, management becomes a condition alongside identity, clearance, time, and on-call status. section 6.2.1 section 13.3.3

Deployment access after hours

An engineer may deploy from a managed device during business hours when sufficiently cleared. At 10 p.m., the request also requires on-call status; an unmanaged device fails the baseline requirement regardless of the engineer’s other attributes. section 6.2.1

Managed-device requirements support zero-trust authorization when policy engines evaluate them at request time. For employees, a policy enforcement point can verify an identity token together with a signed posture token; customer-managed devices may instead rely on the customer’s identity provider and tenant-scoped authorization. section 9.0 section 13.3.3

Table 6.3 Attribute evaluation matrix for ABAC-based deployment access at ACME Corp

Scenario	clearance_level	device_managed	hour_of_day	on_call	Decision
Engineer deploying at 10 p.m., on call	High	true	22	true	Allow
Engineer deploying at 10 p.m., not on call	High	true	22	false	Deny
Engineer deploying at 2 p.m.	Medium	true	14	false	Deny
Engineer deploying at 2 p.m.	High	true	14	false	Deny
Engineer deploying at 10 a.m. on a managed device	High	true	10	false	Allow

Compare clearance, device management, time, and on-call status across deployment requests to see how layered policy produces allow or deny decisions. section 6.2.1

How Authorization in Action covers it

liveBook manning.com

Read Authorization in Action on liveBook Get the book at manning.com

Also explained in

liveBook manning.com

Acing the CCNA Exam: Volume 2 Advanced Networking and SecurityA managed device is a network device that exposes operational or configuration information to a network management system through a management protocol.

Compare how 2 books explain managed device →

Related concepts

SNMPpart of · SNMP is an application-layer network management protocol for monitoring and configuring networked devices through a centralized management system.
management information baseused by · A Management Information Base is a structured collection of managed objects and variables that a network-management protocol can query or modify.
device posture signalused by · A device posture signal is a signal describing security-relevant properties or assessed state of a device involved in an access request.
SNMP Set requestconfigured by · An SNMP Set request asks an SNMP agent to change specified management-object values on a managed device.
SNMP Trapproduces · An SNMP trap is an unsolicited, unacknowledged notification message sent by a managed device to report an event to a network management system.
attribute-based access controlused by · Attribute-based access control is an authorization model that evaluates subject, resource, action, and contextual attributes against policies to make access decisions.

This explainer was generated by Manning's knowledge graph from the text of Authorization in Action. The section links point to the parts of the book it draws on.