Tailscale Policy Manager

Tailscale controls who can talk to what on your private network through a single policy file — a HuJSON document you manage in the admin console or, better yet, in a git repository with automated deployment.

Quick orientation

When a user asks about Tailscale policy/ACL work, figure out what they need:

• Writing or editing rules → start with the policy file structure below, then references/policy-file-reference.md for full details
• Setting up git-based automation → references/gitops-setup.md
• Using the API directly → references/api-reference.md
• Debugging why something isn't allowed → check the tests block section below and the ACL rule syntax

The HuJSON format

Tailscale policy files use HuJSON — standard JSON plus two things:

• Line comments (//) and block comments (/* */)
• Trailing commas on the last item in any array or object