A global administrator has superuser privileges or equivalent administrative rights. When logged in to the global zone, the global administrator can monitor and control the system as a whole.
A non-global zone can be administered by a zone administrator. The global administrator assigns the required authorizations to the zone administrator as described in admin Resource. The privileges of a zone administrator are confined to a specific non-global zone.