OduScale / Private access

An employee joins. Their Odoo access follows.

Give access managers one place to enroll employee devices, inspect VPN connections and revoke access. OduScale connects Odoo employee records to your Headscale infrastructure and the Tailscale clients on their devices.

What it does

OduScale in your workflow.

Manage employee VPN access to Odoo with Tailscale and Headscale, directly from employee records.

Employee-based enrollment
Grant access from Odoo and issue a single-use, expiring enrollment key for each employee device.
A device inventory
See VPN addresses, last-seen times and the latest synchronized connection status, with enrollment history kept on the access record.
Access that can be revoked
Remove one device or revoke all of an employee's VPN access. Archiving an employee or linked Odoo user also revokes active access.
Multiple companies and servers
Manage access across configured Headscale servers and companies, with a retained audit history of access changes.

How it works

From setup to everyday use.

  1. Grant employee access

    An access manager selects the employee and Headscale server, then issues a device enrollment key.

  2. Connect with Tailscale

    The employee enrolls their device and opens the configured VPN Odoo address using their own Odoo account.

  3. Manage the lifecycle

    Synchronize the device inventory, revoke a lost device or remove all VPN access when the employee leaves.

Running OduScale

Requires a configured Headscale server, a VPN gateway and Tailscale on employee devices. VPN connectivity and Odoo permissions are separate: employees still sign in to Odoo. Your network policy determines which services they can reach.

Put OduScale to work.

Discuss your Odoo setup and how this solution fits your team. Explore the full development and operations platform on the Oduflow website.