Each threshold value on a resource control must be associated with one of the following privilege levels:
Privilege level can be modified by the owner of the calling process. RCPRIV_BASIC is associated with a resource's soft limit.
Privilege level can be modified only by privileged (root) callers. RCPRIV_PRIVILEGED is associated with a resource's hard limit.
setrctl(2) will only succeed when called as a privileged user in the global zone. Inside a non-global zone, root cannot set zone-wide controls.
Privilege level remains fixed for the duration of the operating system instance.
Figure 5–2 shows the timeline for setting privilege levels for signals that are defined by the /etc/project file process.max-cpu-time resource control.