Use the capacity_scope category on computer to desactivate everything.
The alarm is now able to open/close the allocation.

It now checks: edit workflow, access log and capacity usage.