DentonGentry
commented
1 year ago In the absence of an autogroup feature:
- Device Authorization could be used to decide which devices should be allowed on a tailnet.
- Webhooks could be used to be notified of what is joining the tailnet.
What are you trying to do?
I want to use ACL to restrict Web SSH Client from Tailscale Dashboard to specific devices.
How should we solve this?
I am not sure what is the best way to achieve it. May be by adding another autogroup for webssh?
"src": ["autogroup:websshclient"],What is the impact of not solving this?
Lack of finer control over this feature to isolate devices.
Anything else?
No response