I feel obliged to point out that this blog post is roughly 5 years old. People change, opinions evolve. In just a few years, vast technological landscapes can shift. And don't get me started on config files. Please consider this text in the context of its time.

Okay, there is one remaining obvious question. What if you have an admin that is responsible for all the systems and you want to give her access to all the zone consoles without the need to reconfigure this each time you create a new zone?

That’s really easy. You just specify the authorization without a zone name:

root@solaris:~# usermod -A +solaris.zone.console -P +'Zone Console' guru

As already explained two days ago, you need to have the authorization solaris.zone.console and the rights profile Zone Console, but the zone name and the / before it is optional.

Let’s try to access the zone console:

root@solaris:~# su - guru
guru@solaris:~$ pfexec zlogin -C testzone
[Connected to zone 'testzone' console]
testzone console login:
Written by

Joerg Moellenkamp

Grey-haired, sometimes grey-bearded Windows dismissing Unix guy.