A method (600, 700) of controlling an edge computing device, the method (600, 700) comprising: at the edge computing device: identifying an authentication factor of a user or a system process at the edge computing device; determining an identity of the user or the system process based upon the authentication factor; receiving an input from the user or the system process requesting access to or configuration of a resource of the edge computing device; determining whether the user or the system process has privileges to access or configure the resource by: formulating a claims request (22a, 22b) which requests claims based on the determined identity of the user or the system process, wherein the claims indicate an authorization assigned to the user or the system process for the resource from a claims provider; sending the claims request (22a, 22b) to a local claims provider agent executed by a processor of the edge computing device; determining whether, based on one or more claim request handling factors, that the local claims provider agent can generate a token including the requested claims (24a, 24b), and in response generating the token with the requested claims (24a, 24b); receiving at an access control program the token including the requested claims (24a, 24b); inspecting the claims (24a, 24b) to identify a predefined resource parameter; and authorizing access to or configuration of the resource based on a predetermined policy that specifies the presence of the predefined resource parameter in the requested claims (24a, 24b) is sufficient to allow access to the resource. at the edge computing device: identifying an authentication factor of a user or a system process at the edge computing device; determining an identity of the user or the system process based upon the authentication factor; receiving an input from the user or the system process requesting access to or configuration of a resource of the edge computing device; determining whether the user or the system process has privileges to access or configure the resource by: formulating a claims request (22a, 22b) which requests claims based on the determined identity of the user or the system process, wherein the claims indicate an authorization assigned to the user or the system process for the resource from a claims provider; sending the claims request (22a, 22b) to a local claims provider agent executed by a processor of the edge computing device; determining whether, based on one or more claim request handling factors, that the local claims provider agent can generate a token including the requested claims (24a, 24b), and in response generating the token with the requested claims (24a, 24b); identifying an authentication factor of a user or a system process at the edge computing device; determining an identity of the user or the system process based upon the authentication factor; receiving an input from the user or the system process requesting access to or configuration of a resource of the edge computing device; determining whether the user or the system process has privileges to access or configure the resource by: formulating a claims request (22a, 22b) which requests claims based on the determined identity of the user or the system process, wherein the claims indicate an authorization assigned to the user or the system process for the resource from a claims provider; sending the claims request (22a, 22b) to a local claims provider agent executed by a processor of the edge computing device; determining whether, based on one or more claim request handling factors, that the local claims provider agent can generate a token including the requested claims (24a, 24b), and in response generating the token with the requested claims (24a, 24b); formulating a claims request (22a, 22b) which requests claims based on the determined identity of the user or the system process, wherein the claims indicate an authorization assigned to the user or the system process for the resource from a claims provider; sending the claims request (22a, 22b) to a local claims provider agent executed by a processor of the edge computing device; determining whether, based on one or more claim request handling factors, that the local claims provider agent can generate a token including the requested claims (24a, 24b), and in response generating the token with the requested claims (24a, 24b); receiving at an access control program the token including the requested claims (24a, 24b); inspecting the claims (24a, 24b) to identify a predefined resource parameter; and authorizing access to or configuration of the resource based on a predetermined policy that specifies the presence of the predefined resource parameter in the requested claims (24a, 24b) is sufficient to allow access to the resource.