Agents carry out device and content management via tasks. If a task does not require user participation, then it can be executed by any Agent. Otherwise it can be performed only by assigned agent - for example, when answer to security questions is required to unlock the device.
The operations that require user participation are performed within user session in the operating system only. If no device assignment to Agent is set and tracking of device association to user session is not activated, then the tasks that require user actions shall be performed by any Agent in any user session.