The desktop icon Activate Tailscale doesn't seem to work, at least with Tailscale 1.36.0. A terminal is started but exits immediately.
Running 'tailscale up' manually in a terminal, as user, gives an error:
Access denied: denied
Use 'sudo tailscale up' or 'tailscale up --operator=$USER' to not require root.
I experimented by first running 'tailscale up --operator=user' and/or 'tailscale set --operator=user' as root, and than run 'tailscale up' as user. This seems to work, however only once. After user runs 'tailscale down', user cannot run 'tailscale up' anymore until root again sets the operator to user.
Tailscale also provides 'tailscale web' which starts a local web server on port 8088 for controlling Tailscale. If I run 'tailscale web' as root, I can connect to Tailscale, as user, through this web server/web interface. This seems a nicer solution than through the terminal.
Perhaps we should consider changing the Tailscale VPN CP to use 'tailscale web' instead of 'tailscale up' in a terminal?