Visibility Permissions for Edge Applications

Hi,

we are currently working to make our solution more secure and so we are assigning a unique Application Key to each remote asset (edge server). I found this useful article Permissions-for-Edge-Applications but it only discusses run time permissions. My question is:

Does the user associated with the Application Key need to have visibility of the platform thing representing the remote asset, in order to change any properties (remotely bound) that the key user has access to.

Thanks,