The easiest way for users to join a tailnet is to send them invites from the admin console. This allows you to send either a single invite or multiple invites at once. You can also control and monitor the status of your current invites.

Prerequisites

• You need to be an Owner, Admin, or IT admin to send invites.
• You must use a custom domain name for your tailnet. You cannot invite users if you are using single user email account to authenticate to your tailnet, such as gmail.com. Your custom domain must use one of the following identity providers:
  • A natively supported identity provider such Google, GitHub, Microsoft, Okta, or OneLogin.
  • A custom OIDC provider such as Auth0, Authentik, Dex, Duo, GitLab, Keycloak, JumpCloud, Ory, or ZITADEL.

Also note that user invites can only be sent to email addresses with the same custom domain name that you used to create your tailnet. For example, if your Tailscale account is user@example.com, each email address must also contain a domain of example.com.

Sending invites

1. Open the Users page of the admin console.

2. Click Invite team.

3. Add the email address for each user that you want to invite to the tailnet.

   

   Multiple email addresses must be comma separated with an optional space after each comma. The acceptable formats are:

   user1@example.com,user2@example.com,user3@example.com

   user1@example.com, user2@example.com, user3@example.com

4. Select the user role you want to automatically assign for each user in the invite. Only one role can be assigned for all email addresses in a single invite.

   

5. Click Send emails.

Viewing invites

To view all of the current invites:

1. Open the Users page of the admin console.

2. Click the Status drop-down and filter by Invited.

   

Resending invites

1. Open the Users page of the admin console.

2. Locate the invited user by either typing their email address in the search bar or filter users by Invited.

3. Click on the next to the user’s name, then click Resend user invite.

   

Deleting invites

1. Open the Users page of the admin console.

2. Locate the invited user by either typing their email address in the search bar or filter users by Invited.

3. Click on the next to the user’s name, then click Delete user invite.

   

Monitoring invites

User invites can be monitored in the audit logs page of the page of the admin console.

Accepting an invite

When a user is sent an invite, they receive an email inviting them to join your organization’s tailnet by downloading the Tailscale client and signing in.

When the invited user signs in on a device or signs in to the admin console, they are automatically added to the tailnet.

Limitations of invites

• Only users in the same domain can be invited using the above method.
• GitHub users accounts don’t have email addresses, so you cannot send an invite to GitHub accounts.
• All users within a single team invite must be granted the same role.
• A user can only be emailed one invite. If the invite is deleted, it can be resent.

Approving users

When users are sent invites to join a tailnet that enforces user approval, the invited users are automatically approved. No additional action is needed for user approval.

Inviting users with a different email domain

Currently, Tailscale only supports creating tailnets with users from a single domain or GitHub organization. To invite a user, they need an email address with the same domain.

Inviting users with a shared email address

Signups using shared email hosts such as @gmail.com are limited to the Free plan. You cannot send invites when using shared email hosts.

As an alternative, we recommend you check out our node sharing feature that allows you to securely share your individual nodes with other Tailscale networks.