The device’s own interface, in your browser
Not a limited subset — the actual native interface the vendor shipped, at its own private address, behind your organisation’s login. If you can do it on site, you can do it from your desk. This is why there is no “unsupported device” tier.