---
module: aria.device-posture
title: Device Posture
tab: Testing
order: 35
audience: dev
---

Frontend test checklist for **Device Posture** (`aria.bcos.dev`). Click through in the UI and mark each row Pass or Fail. This screen is **read-only** — there is nothing to create, edit, or delete.

## Set up
Log in at **aria.bcos.dev** — test accounts (all password `Passw0rd-d3v!`):

| Login | Role | Sees |
|-------|------|------|
| `bcos_a@bcos.dev` | Admin (BCOS_ADMIN) | Full screen · all institutions |
| `msp_a@msp1.bcos.dev` | MSP admin | **No access** — screen is admin-only |
| `customer_a@customer1.bcos.dev` | Customer | **No access** — screen is admin-only |

Test devices are the simulators grouped under institutions **C1BD / C2BD / C3BD** — e.g. **C1-ATM-001…**, **C1-TCR-001…**, **C1-SRV-001…**.

## What to test

| # | Do this | ✅ Pass if |
|---|---------|-----------|
| 1 | As `bcos_a`, open **Device Posture** | Table loads with institution group headers (e.g. **C1BD**, **C2BD**), each **collapsed** and showing a device count + average score |
| 2 | Click an institution header | The row expands (chevron **▶ → ▼**) and its device rows appear with columns **Device / OS Version / OS Status / Disk Enc. / … / Score / Last Check** |
| 3 | Click a device row (or its **Detail** button) | A panel slides in from the right showing a big **Posture Score** and a per-check breakdown (Disk Encryption, Audit Policy, Software Whitelist, OS Version, OS EOL) |
| 4 | In the panel, look at a failing check (e.g. Disk Encryption **✗**), then close with **✕** / **Close** / clicking the dark overlay | The failing check shows a red penalty chip (e.g. **−25**); closing dismisses the panel |
| 5 | Open **Filters** (**▶** on the left sidebar), set **Score** → **Below Good (<80)** | The list narrows to only devices scoring under 80, and a **Score: Below Good (<80)** chip appears at the top |
| 6 | Set **OS Status** → **EOL**, then remove filters via a chip **×** or **✕ Clear all** | Only devices with an **EOL** badge remain; clearing brings the full list back |
| 7 | Turn the **Auto-refresh** toggle off, then click the **↻** button | The countdown (e.g. "(60s)") disappears when off; clicking **↻** reloads the list (button briefly shows **⟳**) |
| 8 | Find an institution header that contains a low-scoring device | The header shows an amber **⚠ below 80** flag and a colour-coded average score |
| 9 | Log in as `msp_a`, then `customer_a`, and open **Device Posture** | **No** posture data shows and a **Load Failed** error toast appears — ARIA posture is BCOS_ADMIN-only (this is expected, not a bug) |

**Report a fail with:** the row #, which login you used, and what you actually saw.
