Device approval

An Organization that reaches its Environments through a tailnet lets in only devices its Admin approved (decision 0192). Entry takes three things: the network, membership of the Organization and access to the Environment. An approved device is the network part.

What you do

Register the device yourself: sign in to your Organization’s tailnet in the Tailscale app with your Lazurio account, as Reach an Environment through Tailscale describes. Registration alone gives no access. Until the Admin approves the device, the Environment’s address does not open on it.

Then ask the Admin to approve it. Say which device it is and its name in Tailscale: see How to ask the Admin.

You do not need approval for:

• a phone paired through the ChatGPT app (Phone and computer), which reaches the Environment through your ChatGPT account;
• an Organization that switched to public addresses (decision 0213), where you enter with your Lazurio account alone.

When you lose a device

Tell the Admin at once, so they remove it. Under decision 0192 you will also be able to remove your own lost device yourself. Until Lazurio offers that, the Admin does it.

For the Admin

• Approve a specific device by its record in the tailnet (node, key, owner), never by its name alone. A name can be changed and proves nothing.
• Approving a device for the Organization’s Environments opens nothing in a person’s Personal Environment.
• As the target you approve and remove devices with a click in the Organization’s Dashboard. Until that is deployed, your Organization does it by a reviewed change to its server configuration.