admin user is the only one allowed to change the device authorization state