Granular Policy?

I'm aware of the ability to configure Remote Management permission within an overall policy. Also aware of the ability to override certain settings at the folder-level, device-level, etc..

However, I don't seem to find a method to granularly and quickly configure Ask Permission at a given device? Don't find that setting in Override settings or other method. Any help would be appreciated.