Keep in mind the need to limit via RBAC the amount of time a client can use of devices, think about billing possibilities. Provide the ability to get current lease information and available time beyond just the ID on the client side.