If zone administration is assigned to non-root users, the authorization solaris.zone.manage/zonename is required. A specific zonename suffix, preceded by the slash character (/), is optional. When omitted, the authorization matches any zone.
Unless the –C option is used to connect to the zone console, logging in to a zone using zlogin starts a new task. A task cannot span two zones.
The zlogin command is used to log in from the global zone to any zone that is in the running state or the ready state.
As described in How to Use Non-Interactive Mode to Access a Zone, you can use the zlogin command in non-interactive mode by supplying a command to run inside a zone. However, the command or any files the command acts upon cannot reside on NFS. The command will fail if any of its open files or any portion of its address space resides on NFS. The address space includes the command executable itself and the command's linked libraries.
The zlogin command can only be used by the global administrator or a zone administrator with the appropriate rights, operating in the global zone. See the zlogin(1) man page for more information.