Readonly Tags in Resource Groups

RajNair 216 Reputation points
2024-08-14T16:12:33.5633333+00:00

How to keep the tags in Azure Resource Group as read-only. We have job which update tags based on external system every day, i dont want anyone manually update the tags which are added/updated by the Job. How do i do that. Currently we give contributor permission to team members in a resource group.

 

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
868 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Stanislav Zhelyazkov 23,501 Reputation points MVP
    2024-08-15T06:58:41.63+00:00

    Hi,

    There is no option to make tags read-only. Anyone with permissions to write tags will be able to. Either do not give permissions like contributor to your users to write tags of the resource group or apply policy like Add or replace a tag on resource groups that will apply the tags you need even if someone else modifies them.

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.