device locking policy for lockdev
Role access for lockdev
Role allowed access
User domain for the role