Inviting any user to your tailnet

You can send a one-time use invitation to any user you want to join a Tailscale network (tailnet) in the form of a generated URL. You might want to use one-time user invites to add users such as friends, family, or contractors to a personal tailnet or an organization tailnet for authentication.

Your Tailscale billing includes invited users who join and transfer data in your tailnet. This includes invited users who are paid users in other tailnets. Tailscale bills for every active user on every tailnet.

Inviting any user to a tailnet is available for all plans.
Inviting any user to a tailnet is currently in beta.

To send an invite link:

  1. Open the Users page of the admin console.
  2. Select Invite external users via link.
  3. Select the user role you want to assign to the invite link.
  4. Click Generate & copy invite link to copy the invite URL to your clipboard.
  5. Send the URL link to the user you want to invite to your tailnet.

Enabling or disabling joining external tailnets

You need to be an Owner, Admin, or IT admin to enable or disable joining external tailnets.

You can allow or prevent users in your organization’s tailnet from joining other (external) tailnets. By default, tailnets only allow Admin users to accept an invitation to join external tailnets. This option is not available for personal tailnets.

To enable joining external tailnets:

  1. Open the General settings page of the admin console.
  2. In the Join external tailnets section, select the user roles to allow joining external tailnets.

To disable joining external tailnets:

  1. Open the General settings page of the admin console.
  2. Select None (disable) in the Join external tailnets section.

Events for joining and leaving an external tailnet appear in the configuration audit logs.

Accepting invites

To accept an invite:

  1. Copy and paste the URL from your invite into a web browser.
  2. Sign in to Tailscale with your identity provider or passkey.
  3. Download the Tailscale client.

Leaving a tailnet

Users who join multiple external tailnets can leave subsequently joined tailnets using the Leave tailnet option. This option only displays subsequent tailnets a user joins. It is only available for organizational tailnets.

If you have access to the admin console:

  1. Open the Users page of the admin console.
  2. Locate your account.
  3. Click on the ellipsis icon menu.
  4. Select Leave tailnet.

If you do not have access to the admin console:

  1. Go to https://login.tailscale.com/.
  2. In the top right corner, click on the ellipsis icon menu.
  3. Select Leave tailnet.
Leave a tailnet

Approving invites

If your tailnet has user approval enabled, you must approver invited users before they can join the tailnet.

Viewing invites

To view all of the current invites:

  1. Open the Users page of the admin console.
  2. Click the Status drop-down and select filter by Invited.

Resending invites

To resend an invite:

  1. Open the Users page of the admin console.
  2. Locate the invited user by either typing their email address in the search bar or filter users by Invited.
  3. Click on the ellipsis icon menu next to the user’s name, then click Copy invite link.
  4. Resend the invite to the user.

Deleting invites

You can delete invites if you accidentally share a user invite or want to revoke it for another reason.

To delete an invite:

  1. Open the Users page of the admin console.
  2. Locate the invited user by typing their email address in the search bar or filter users by Invited.
  3. Click on the ellipsis icon menu next to the user’s name, then click Delete invite.

Monitoring invites

You can track user invite activity in the audit logs page of the admin console.