Readonly Tags in Resource Groups

Question

How to keep the tags in Azure Resource Group as read-only. We have job which update tags based on external system every day, i dont want anyone manually update the tags which are added/updated by the Job. How do i do that. Currently we give contributor permission to team members in a resource group.

 

Answer 1

Sounds like a job for Azure policy to me. You could assign a "Require a tag and its value on resource groups" policy

Hope this helps