Access

Overview

Access is where org admins publish internal and self-hosted services so every member can reach them from one screen — no client, no VPN dance, just a click. It also surfaces your Tailscale tailnet status and previews a browser-based terminal & desktop gateway that's on the way.

Features

• Published apps. Admins register internal services — name, URL, an optional description and an emoji/label icon — as launch tiles. Any member can click a tile to open the app in a new tab.
• Admin-managed catalogue. Admins get add, edit and delete controls on each tile; members see a clean, read-only launcher.
• Browser terminal & desktop (coming soon). Clientless SSH, RDP and VNC into internal hosts, entirely in the browser, powered by an Apache Guacamole gateway. The section activates once the gateway is deployed.
• Tailnet status. When a Tailscale tailnet is configured, Access shows the tailnet name, device count and this host — with a link out to the Tailscale admin.
• Clientless by default. Published apps need nothing installed; a full-device VPN is the separate VPN app for when you want it.

How it works

Access reads the org's published-app list and your admin status, and best-effort fetches Tailscale status to show the tailnet panel. App tiles are simple links; the browser terminal & desktop will proxy through a Guacamole gateway prepared in gitops and exposed on the tailnet.

Apps

Admin-registered internal services (name · URL · icon)

Gateway

Apache Guacamole for SSH / RDP / VNC (coming soon)

Network

Tailscale tailnet status (when configured)