Trusted Extensions narrows the range of Oracle Solaris configuration options:
The LDAP naming service is supported. All zones must be administered from one naming service.
The global zone is an administrative zone. Only the root user or a role can enter the global zone. Therefore, administrative interfaces that are available to regular Oracle Solaris users are not available to regular Trusted Extensions users.
Non-global zones are labeled zones. Users work in labeled zones.