This reports whether an attempt was made to use a software option that hasn't been purchased or enabled (unauthorized) versus all use of that option having been properly authorized. This is effectively a license-compliance alarm at the option level, letting an admin catch configuration attempts that exceed what's actually been licensed on this node. For example, seeing unauthorized here after a technician tried to enable a feature not covered by the node's current software keys would flag that the license needs to be purchased before the feature can actually work.