A system for dynamically implementing exceptions in an onboard network access controller for one or more client devices on a data communications network aboard an aircraft to connect to a remote network node as authorized by a remote application service over a satellite communications link (26, 32), the system comprising: a client application interface receptive to a data link request from the one or more client devices; an onboard connectivity manager including: a network access control interface connected to the onboard network access controller to request the exceptions in response to a connection authorization; a client presence manager receptive to the data link request relayed by the client application interface from the one or more client devices, a presence state for the one or more client devices being activated and maintained following the data link request; and a remote connectivity manager connected to the remote application service and in communication with the onboard connectivity manager; wherein the remote connectivity manager generates the connection authorization based upon an evaluation of the presence state for the one or more client devices matching one or more conditions set by the remote application service and wherein the presence state includes one or more data elements, and the one or more data elements is selected from a group consisting of: an airline identifier associated with the aircraft, a flight identifier of a flight to which the aircraft is associated, a destination identifier of the flight, an origin identifier of the flight, an arrival time corresponding to the flight, the departure time corresponding to the flight, a real time network connectivity status for a particular one of the one or more client devices, a private network address assignment for the particular one of the one or more client devices, a network connectivity pre-purchase status for the particular one of the one or more client devices, a passenger service class designator, and a beam load of the satellite communications link (26, 32). a client application interface receptive to a data link request from the one or more client devices; an onboard connectivity manager including: a network access control interface connected to the onboard network access controller to request the exceptions in response to a connection authorization; a client presence manager receptive to the data link request relayed by the client application interface from the one or more client devices, a presence state for the one or more client devices being activated and maintained following the data link request; and a network access control interface connected to the onboard network access controller to request the exceptions in response to a connection authorization; a client presence manager receptive to the data link request relayed by the client application interface from the one or more client devices, a presence state for the one or more client devices being activated and maintained following the data link request; and a remote connectivity manager connected to the remote application service and in communication with the onboard connectivity manager; wherein the remote connectivity manager generates the connection authorization based upon an evaluation of the presence state for the one or more client devices matching one or more conditions set by the remote application service and wherein the presence state includes one or more data elements, and the one or more data elements is selected from a group consisting of: an airline identifier associated with the aircraft, a flight identifier of a flight to which the aircraft is associated, a destination identifier of the flight, an origin identifier of the flight, an arrival time corresponding to the flight, the departure time corresponding to the flight, a real time network connectivity status for a particular one of the one or more client devices, a private network address assignment for the particular one of the one or more client devices, a network connectivity pre-purchase status for the particular one of the one or more client devices, a passenger service class designator, and a beam load of the satellite communications link (26, 32).