The Allocate Device authorization enables users to allocate a device. The Allocate Device authorization, and the Revoke or Reclaim Device authorization, are appropriate for administrative roles.
Before You Begin
You must be in the Security Administrator role in the global zone.
If the existing profiles are not appropriate, the security administrator can create a new profile. For an example, see How to Create a Rights Profile for Convenient Authorizations.
For the step-by-step procedure, see Assigning Rights to Users in Securing Users and Processes in Oracle Solaris 11.3.
Object Label Management
Example 53, Creating Fine-Grained Device Authorizations shows how to assign the authorizations.