Okay, there is one remaining obvious question. What if you have an admin that is responsible for all the systems and you want to give her access to all the zone consoles without the need to reconfigure this each time you create a new zone?
That’s really easy. You just specify the authorization without a zonename:
root@solaris:~# usermod -A +solaris.zone.console -P +'Zone Console' guruAs already explained two days ago, you need to have the authorization solaris.zone.console and the rights profile Zone Console, but the zonename and the / before it is optional.
Let’s try to access the zone console:
root@solaris:~# su - guru
guru@solaris:~$ pfexec zlogin -C testzone
[Connected to zone 'testzone' console]
testzone console login: