Comment by zephen
8 days ago
There are a lot of workarounds these days, such as tailnet switching, and, of course, if you're admin on both tailnets, you're practically golden with the "share" option.
But even power users have to pick and choose their battles.
If I had a nice tailnet home setup going I might be seriously miffed if I had to try to fit in some of my devices to a corporate tailnet I didn't control.
True, but to be frank you shouldn’t be using personal devices for work purposes anyway.
Security is a series of trade-offs, which in the worst case disallows anybody from doing anything.
In the simplest case, if a person has two different sets of systems they desire to access from a cellphone, and an unwillingness to carry two different cellphones around with them, then it becomes a business decision of whether that person is valuable and trustworthy enough to allow access to work systems and "other" systems from that cellphone.
Who pays for the cellphone, and whether this extends to laptops or not, are questions of degree.