1. A method comprising: enabling a session level restriction (SLR); receiving a request from a first user of a first client to connect to a first input/output (I/O) device coupled to the first client; creating a first global namespace symbolic link in global namespace associated with a first virtual USB device, wherein the first virtual USB device is associated with the first I/O device; determining if the first global namespace symbolic link is associated with a port of the first client; when the first global namespace symbolic link is determined to be associated with the port of the first client, deleting the first global namespace symbolic link in global namespace and creating a first port name symbolic link in a first user-session namespace associated with the first user based, at least in part, on a first available port index in the first user-session namespace, wherein the first port name symbolic link replaces the deleted first global namespace symbolic link and wherein access to the first port name symbolic link is restricted to the first user of the first client; and when the first global namespace symbolic link is determined not to be associated with the port of the first client, moving the first global namespace symbolic link to a user-session namespace.