You can send a one-time use invitation to any user that you want to join a Tailscale network (tailnet), in the form of a generated URL. This can be useful for adding users such as friends and family, or contractors to a personal tailnet (e.g. gmail.com) or an organization tailnet for authentication.

When users join your tailnet by invitation, they are added to your Tailscale billing if they transfer data in your tailnet. This includes invited users who are paid users in other tailnets. Tailscale bills for every active user on every tailnet.

Sending invite links

1. Open the Users page of the admin console.

2. Click Invite users and select Invite via link.

3. Select the user role you want to automatically assign for the invite link.

4. Click Generate & copy invite link. A URL link is copied to your clipboard.

5. Send the URL link to the user that you want to invite to your tailnet.

Enabling or disabling joining external tailnets

You need to be an Owner, Admin, or IT admin to enable or disable joining external tailnets.

You can enable or disable users on your organization tailnet from joining other (external) tailnets. By default, a tailnet allows only Admin users to accept an invitation to join other tailnets. This option is not available for personal tailnets.

To enable joining external tailnets:

1. Open the General settings page of the admin console.
2. In the Join external tailnets section, select the role for the users that are allowed to join external tailnets.

To disable joining external tailnets, select None (disable) in the Join external tailnets section.

Events for joining and leaving an external tailnet will appear in the configuration audit logs.

Accepting invites

1. Copy and paste the URL from your invite into a web browser.

2. Sign in to Tailscale with your identity provider or passkey.

3. Download the Tailscale client.

Leaving a tailnet

Users who join multiple external tailnets can leave subsequently joined tailnets, using the Leave tailnet option. This option will not display in the first tailnet that a user joins, and is only available for organizational tailnets.

If you have access to the admin console, open the Users page of the admin console, locate your account, click on the menu, and select Leave tailnet.

If you do not have access to the admin console, go to https://login.tailscale.com/. In the top right corner, click on the menu, and select Leave tailnet.

Approving invites

If your tailnet has user approval enabled, invited users must first be approved before they can join the tailnet.

Viewing invites

To view all of the current invites:

1. Open the Users page of the admin console.

2. Click the Status drop-down and select filter by Invited.

Resending invites

1. Open the Users page of the admin console.

2. Locate the invited user by either typing their email address in the search bar or filter users by Invited.

3. Click on the menu next to the user’s name, then click Copy invite link.

4. Resend the invite to the user.

Deleting invites

If a user invite is accidentally shared, or you want to revoke the invite for another reason, it can be deleted.

1. Open the Users page of the admin console.

2. Locate the invited user by either typing their email address in the search bar or filter users by Invited.

3. Click on the menu next to the user’s name, then click Delete invite.

Monitoring invites

You can track user invite activity in the audit logs page of the admin console.

Limitations

• GitHub tailnets do not support inviting external users. Their membership is managed by GitHub.
• GitHub users can only be members of GitHub tailnets.