Readonly Tags in Resource Groups

Question

How to keep the tags in Azure Resource Group as read-only. We have job which update tags based on external system every day, i dont want anyone manually update the tags which are added/updated by the Job. How do i do that. Currently we give contributor permission to team members in a resource group.

 

Answer 1

Hi,

There is no option to make tags read-only. Anyone with permissions to write tags will be able to. Either do not give permissions like contributor to your users to write tags of the resource group or apply policy like Add or replace a tag on resource groups that will apply the tags you need even if someone else modifies them.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.