{"slug":"your-organization-has-restricted-members-from-joining-external-tailnets","title":"Your organization has restricted members from joining external tailnets","tags":["tailscale","admin"],"agent_summary":"Last validated: Jul 31, 2025","trigger_phrases":[],"runnable":false,"markdown":"\r\n# Your organization has restricted members from joining external tailnets\r\n\r\nLast validated: Jul 31, 2025\r\n\r\nThis topic explains a message that may appear in the Tailscale admin console and the actions you can take to address it. For a list of currently documented messages in the Tailscale admin console and client, refer to the main [Messages](https://tailscale.com/docs/reference/messages) topic.\r\n\r\n## [Message displayed in the admin console](https://tailscale.com/docs/reference/messages/console/org-has-restrictions\\#message-displayed-in-the-admin-console)\r\n\r\n> Error 403: Your organization has restricted members from joining external tailnets\r\n\r\n## [Why you're seeing this message](https://tailscale.com/docs/reference/messages/console/org-has-restrictions\\#why-youre-seeing-this-message)\r\n\r\nThis error message displays when your tailnet uses a private/owned domain and the administrator is preventing users from joining other (external) tailnets.\r\n\r\n## [What to do](https://tailscale.com/docs/reference/messages/console/org-has-restrictions\\#what-to-do)\r\n\r\nHere are some things you can try to resolve this issue:\r\n\r\n- Use a different email address to join an external tailnet.\r\n- Contact your IT administrator to request permission to join an external tailnet using your organization email address.\r\n\r\n## [Additional information](https://tailscale.com/docs/reference/messages/console/org-has-restrictions\\#additional-information)\r\n\r\n- For information about enabling and disabling access to external tailnets, refer to [Invite any user to your tailnet](https://tailscale.com/docs/features/sharing/how-to/invite-any-user#enable-or-disable-joining-external-tailnets).\r\n\r\n![Project Logo](https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed)\r\n\r\nAsk AI\r\n\r\nreCAPTCHA\r\n\r\nRecaptcha requires verification.\r\n\r\nprotected by **reCAPTCHA**\r\n","html":"<h1>Your organization has restricted members from joining external tailnets</h1>\n<p>Last validated: Jul 31, 2025</p>\n<p>This topic explains a message that may appear in the Tailscale admin console and the actions you can take to address it. For a list of currently documented messages in the Tailscale admin console and client, refer to the main <a href=\"https://tailscale.com/docs/reference/messages\">Messages</a> topic.</p>\n<h2><a href=\"https://tailscale.com/docs/reference/messages/console/org-has-restrictions#message-displayed-in-the-admin-console\">Message displayed in the admin console</a></h2>\n<blockquote>\n<p>Error 403: Your organization has restricted members from joining external tailnets</p>\n</blockquote>\n<h2><a href=\"https://tailscale.com/docs/reference/messages/console/org-has-restrictions#why-youre-seeing-this-message\">Why you're seeing this message</a></h2>\n<p>This error message displays when your tailnet uses a private/owned domain and the administrator is preventing users from joining other (external) tailnets.</p>\n<h2><a href=\"https://tailscale.com/docs/reference/messages/console/org-has-restrictions#what-to-do\">What to do</a></h2>\n<p>Here are some things you can try to resolve this issue:</p>\n<ul>\n<li>Use a different email address to join an external tailnet.</li>\n<li>Contact your IT administrator to request permission to join an external tailnet using your organization email address.</li>\n</ul>\n<h2><a href=\"https://tailscale.com/docs/reference/messages/console/org-has-restrictions#additional-information\">Additional information</a></h2>\n<ul>\n<li>For information about enabling and disabling access to external tailnets, refer to <a href=\"https://tailscale.com/docs/features/sharing/how-to/invite-any-user#enable-or-disable-joining-external-tailnets\">Invite any user to your tailnet</a>.</li>\n</ul>\n<p><img src=\"https://cdn.brandfetch.io/tailscale.com/fallback/lettermark/theme/dark/h/256/w/256/icon?c=1bfwsmEH20zzEfSNTed\" alt=\"Project Logo\"></p>\n<p>Ask AI</p>\n<p>reCAPTCHA</p>\n<p>Recaptcha requires verification.</p>\n<p>protected by <strong>reCAPTCHA</strong></p>\n"}