Tailscale is a secure network (tailnet) management service with user management features including invitations, roles, approval, and fast user switching.
Field note
Tailscale provides user management for tailnets, including inviting users, managing access via roles and approvals, deleting/suspending users, admin console session timeout, and fast user switching in the client.
Capabilities
Tags
Ways to use it
Not filed / Not filed
Product features
Configure access control lists (ACLs) to manage device permissions.
Enforce access for users, devices, and applications in the tailnet.
Set idle session timeout for the Tailscale admin console.
Secure access to AI infrastructure, GPU clusters, and private LLM deployments.
Automate and manage various aspects of the tailnet via the Tailscale API.
Share local development servers, test webhooks, and simulate geo-specific traffic.
Manage and troubleshoot devices within the tailnet.
Set contacts for account changes, configuration issues, security issues, and billing.
Central server that coordinates device connections.
Delete or suspend users from your tailnet.
Designated Encrypted Relay for Packets for secure, low-latency connections.
Review and approve devices before they are allowed access.
Explore how your tailnet is tied to your domain.
Secure, temporary connections for CI/CD workflows.
Switch between two or more logged-in accounts on the same device without re-authentication.
Grant access control permissions across network connections and application permissions.
Manage secure, audited access to production servers, Kubernetes clusters, and cloud environments.
Invite users to join your tailnet through various methods.
Stable IP addresses based on device and authorization credentials.
Change billing information related to your Tailscale account.
Change your Tailscale plan by upgrading or downgrading to a different plan.
Mechanism for machine authentication to join a tailnet.
Connect and manage home network devices and services from anywhere.
Meet compliance requirements with static egress IPs, device posture checks, and auditable access controls.
Replace traditional site-to-site VPNs with Tailscale and WireGuard.
Protocol for NAT traversal.
A private network of devices that can communicate securely.
Understand tailnet name types: Tailnet DNS, machine, Tailnet ID, and Legacy ID.
Reference syntax for the tailnet policy file.
Review and approve new users before they can join your Tailscale network.
Invite users to your tailnet and assign roles.
Use roles to restrict access to the admin console.
Replace legacy corporate VPNs with faster, more secure remote access.