Authorized (permit) means client has passed an applied Device Access Policy.
Authorized means client allowed to connect but no Device Access Policy was applicable.
Device Access Policy set to win allow, iOS deny (for instance) would give
ipad authorized (deny)
windows pc authorized (permit).
With no Device Access Policy(ies) in place you just get "authorized".
At least that's how I understand it.