Policy to tag Azure Resources with Creator email Id

Amjad Nagori 296 Reputation points
2021-05-13T12:28:49.09+00:00

Is there any way to assign Azure policy on subscription level to Add a tag to resources with email id of creator (who creates the resource whether its from portal, ARM template or PowerShell.)

Azure Policy
Azure Policy
An Azure service that is used to implement corporate governance and standards at scale for Azure resources.
1,020 questions
0 comments No comments
{count} vote

1 answer

Sort by: Most helpful
  1. Amjad Nagori 296 Reputation points
    2021-05-19T13:36:30.043+00:00

    For people who are looking for the same solution-

    I was able to fulfil this requirement by following below document-

    https://techcommunity.microsoft.com/t5/core-infrastructure-and-security/tagging-azure-resources-with-a-creator/ba-p/1479819#:~:text=Update%3A%20Objects%20created%20by%20a,role%20in%20Azure%20Active%20Directory.

    I got some issue as my account was Contributor and script in the document creating Identity for Azure Function with assigning Tag Creator and Reader role to the same.
    So make sure your account have Owner rights on subscription, if not then once script completed successfully then ask Owner to add these 2 roles in Function's identity section.

    4 people found this answer helpful.

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.