Managing Device Allocation

When the pkg:/system/device-allocation package is on the system, device allocation can be controlled. Device allocation is commonly implemented at sites that require an additional layer of device security. Typically, users must have authorization to access allocatable devices.

The following task map points to procedures and command options that enable, configure, and troubleshoot device allocation. Device allocation is not enabled by default. After device allocation is enabled, see Allocating Devices for instructions on allocating devices.

Table 4-2 Managing Device Allocation Task Map

Task Description For Instructions

Make a device allocatable.

Disable device allocation.

Enables a device to be allocated to one user at a time.

Removes allocation restrictions from all devices.

Enabling or Disabled Device Allocation

Authorize users to allocate a device.

Assigns device allocation authorizations to users.

How to Authorize Users to Allocate a Device

View the allocatable devices on your system.

Lists the devices that are allocatable, and the state of the device.

Viewing Allocation Information About a Device

Forcibly allocate or deallocate a device.

Allocates or deallocates a device to a user who has an immediate need.

Forcibly Allocating or Deallocating a Device

Change the allocation properties of a device.

Changes the requirements for allocating a device.

Changing Which Devices Can Be Allocated

Audit device allocation.

Records device allocation in the audit trail

Auditing Device Allocation

Create a device-clean script.

Purges data from a physical device.

Writing New Device-Clean Scripts