1. A method, comprising: receiving a request from a management agent executed by a client device for access to server-side aspects of a restricted resource, the management agent executed by the client device being configured to generate an aggregate user interface for interacting with one or more of device-side aspects of the restricted resource or the server-side aspects of the restricted resource; generating an instance of the restricted resource, the instance of the restricted resource being configured to execute the server-side aspects of the restricted resource; generating an instance of a user interface associated with the restricted resource, the instance of the user interface associated with the restricted resource being configured to provide interaction with the executed server-side aspects of the restricted resource; determining that the client device is authorized to access the server-side aspects of the restricted resource based at least in part on a profile associated with the restricted resource and information describing the client device, wherein the profile comprises profile criteria related to state details of the client device; and; providing the management agent executed by the client device with access to data representative of the instance of the user interface associated with the restricted resource.