private address
Where I work the end user needs to register their MAC address before the device being allowed to join the network. In practice this means turning off private address for the work wifi. I don't know how turning off private address will interact with private relay, but your company might look at introducing a similar registration requirement.
Biting the hand that feeds IT
