Tag support for Azure resources

This article describes whether a resource type supports tags. The column labeled Supports tags indicates whether the resource type has a property for the tag. The column labeled Tag in cost report indicates whether that resource type passes the tag to the cost report. You can view costs by tags in the the Azure billing invoice and daily usage data .

Microsoft.AAD

Resource type Supports tags Tag in cost report
DomainServices Yes Yes
DomainServices / oucontainer No No

Microsoft.Advisor

Resource type Supports tags Tag in cost report
advisorScore No No
configurations No No
generateRecommendations No No
metadata No No
predict No No
recommendations No No
suppressions No No

Note

All Microsoft.Advisor resources are free and therefore not included in the cost report.

Microsoft.AlertsManagement

Resource type Supports tags Tag in cost report
actionRules Yes Yes
alerts No No
alertsMetaData No No
migrateFromSmartDetection No No
smartDetectorAlertRules Yes Yes
smartGroups No No

Microsoft.AnalysisServices

Resource type Supports tags Tag in cost report
servers Yes Yes

Microsoft.ApiManagement

Resource type Supports tags Tag in cost report
deletedServices No No
getDomainOwnershipIdentifier No No
reportFeedback No No
service Yes Yes
service / eventGridFilters No No
validateServiceName No No

Note

Azure API Management only supports creating a maximum of 15 tag name/value pairs for each service.

Microsoft.AppConfiguration

Resource type Supports tags Tag in cost report
configurationStores Yes No
configurationStores / eventGridFilters No No
configurationStores / keyValues No No
configurationStores / replicas No No
deletedConfigurationStores No No

Microsoft.AppPlatform

Resource type Supports tags Tag in cost report
runtimeVersions No No
Spring Yes Yes
Spring / apps No No
Spring / apps / deployments No No

Microsoft.Authorization

Resource type Supports tags Tag in cost report
accessReviewHistoryDefinitions No No
classicAdministrators No No
dataAliases No No
dataPolicyManifests No No
denyAssignments No No
diagnosticSettings No No
diagnosticSettingsCategories No No
elevateAccess No No
eligibleChildResources No No
locks No No
policyAssignments No No
policyDefinitions No No
policyExemptions No No
policySetDefinitions No No
privateLinkAssociations No No
resourceManagementPrivateLinks Yes Yes
roleAssignmentApprovals No No
roleAssignments No No
roleAssignmentScheduleInstances No No
roleAssignmentScheduleRequests No No
roleAssignmentSchedules No No
roleDefinitions No No
roleEligibilityScheduleInstances No No
roleEligibilityScheduleRequests No No
roleEligibilitySchedules No No
roleManagementPolicies No No
roleManagementPolicyAssignments No No

Microsoft.Automation

Resource type Supports tags Tag in cost report
automationAccounts Yes Yes
automationAccounts / agentRegistrationInformation No No
automationAccounts / configurations Yes Yes
automationAccounts / hybridRunbookWorkerGroups No No
automationAccounts / hybridRunbookWorkerGroups / hybridRunbookWorkers No No
automationAccounts / jobs No No
automationAccounts / privateEndpointConnectionProxies No No
automationAccounts / privateEndpointConnections No No
automationAccounts / privateLinkResources No No
automationAccounts / runbooks Yes Yes
automationAccounts / runtimes Yes Yes
automationAccounts / softwareUpdateConfigurationMachineRuns No No
automationAccounts / softwareUpdateConfigurationRuns No No
automationAccounts / softwareUpdateConfigurations No No
automationAccounts / webhooks No No
deletedAutomationAccounts No No

Note

Azure Automation only supports creating a maximum of 15 tag name/value pairs for each Automation resource.

Microsoft.AutonomousDevelopmentPlatform

Resource type Supports tags Tag in cost report
accounts Yes Yes
accounts / datapools No No
workspaces Yes Yes
workspaces / eventgridfilters No No

Microsoft.AzureActiveDirectory

Resource type Supports tags Tag in cost report
b2cDirectories Yes No
b2ctenants No No
ciamDirectories Yes Yes
guestUsages Yes Yes

Microsoft.AzureStack

Resource type Supports tags Tag in cost report
cloudManifestFiles No No
generateDeploymentLicense No No
linkedSubscriptions Yes Yes
registrations Yes Yes
registrations / customerSubscriptions No No
registrations / products No No

Microsoft.AzureStackHCI

Resource type Supports tags Tag in cost report
clusters Yes Yes
clusters / arcSettings No No
clusters / arcSettings / extensions No No
clusters / offers No No
clusters / publishers No No
clusters / publishers / offers No No
clusters / updates No No
clusters / updates / updateRuns No No
clusters / updateSummaries No No
galleryImages Yes Yes
marketplaceGalleryImages Yes Yes
networkinterfaces Yes Yes
registeredSubscriptions No No
storageContainers Yes Yes
virtualharddisks Yes Yes
virtualmachines Yes Yes
virtualMachines / extensions Yes Yes
virtualmachines / hybrididentitymetadata No No
virtualnetworks Yes Yes

Microsoft.Batch

Resource type Supports tags Tag in cost report
batchAccounts Yes Yes
batchAccounts / certificates No No
batchAccounts / detectors No No
batchAccounts / pools No No

Microsoft.Blueprint

Resource type Supports tags Tag in cost report
blueprintAssignments No No
blueprints No No
blueprints / artifacts No No
blueprints / versions No No
blueprints / versions / artifacts No No

Microsoft.Cache

Resource type Supports tags Tag in cost report
Redis Yes Yes
Redis / EventGridFilters No No
Redis / privateEndpointConnectionProxies No No
Redis / privateEndpointConnectionProxies / validate No No
Redis / privateEndpointConnections No No
Redis / privateLinkResources No No
redisEnterprise Yes Yes
redisEnterprise / databases No No
RedisEnterprise / privateEndpointConnectionProxies No No
RedisEnterprise / privateEndpointConnectionProxies / validate No No
RedisEnterprise / privateEndpointConnections No No
RedisEnterprise / privateLinkResources No No

Microsoft.Cdn

Resource type Supports tags Tag in cost report
canMigrate No No
CdnWebApplicationFirewallManagedRuleSets No No
CdnWebApplicationFirewallPolicies Yes Yes
edgenodes No No
migrate No No
profiles Yes Yes
profiles / afdendpoints Yes Yes
profiles / afdendpoints / routes No No
profiles / customdomains No No
profiles / endpoints Yes Yes
profiles / endpoints / customdomains No No
profiles / endpoints / origingroups No No
profiles / endpoints / origins No No
profiles / origingroups No No
profiles / origingroups / origins No No
profiles / policies No No
profiles / rulesets No No
profiles / rulesets / rules No No
profiles / secrets No No
profiles / securitypolicies No No
validateProbe No No
validateSecret No No

Microsoft.Chaos

Resource type Supports tags Tag in cost report
artifactSetDefinitions No No
artifactSetSnapshots No No
experiments Yes Yes
targets No No

Microsoft.ClassicCompute

Resource type Supports tags Tag in cost report
capabilities No No
domainNames No No
domainNames / capabilities No No
domainNames / internalLoadBalancers No No
domainNames / serviceCertificates No No
domainNames / slots No No
domainNames / slots / roles No No
domainNames / slots / roles / metricDefinitions No No
domainNames / slots / roles / metrics No No
moveSubscriptionResources No No
operatingSystemFamilies No No
operatingSystems No No
quotas No No
resourceTypes No No
validateSubscriptionMoveAvailability No No
virtualMachines No No
virtualMachines / diagnosticSettings No No
virtualMachines / metricDefinitions No No
virtualMachines / metrics No No

Microsoft.ClassicInfrastructureMigrate

Resource type Supports tags Tag in cost report
classicInfrastructureResources No No

Microsoft.ClassicNetwork

Resource type Supports tags Tag in cost report
capabilities No No
expressRouteCrossConnections No No
expressRouteCrossConnections / peerings No No
gatewaySupportedDevices No No
networkSecurityGroups No No
quotas No No
reservedIps No No
virtualNetworks No No
virtualNetworks / remoteVirtualNetworkPeeringProxies No No
virtualNetworks / virtualNetworkPeerings No No

Microsoft.ClassicStorage

Resource type Supports tags Tag in cost report
capabilities No No
disks No No
images No No
osImages No No
osPlatformImages No No
publicImages No No
quotas No No
storageAccounts No No
storageAccounts / blobServices No No
storageAccounts / fileServices No No
storageAccounts / metricDefinitions No No
storageAccounts / metrics No No
storageAccounts / queueServices No No
storageAccounts / services No No
storageAccounts / services / diagnosticSettings No No
storageAccounts / services / metricDefinitions No No
storageAccounts / services / metrics No No
storageAccounts / tableServices No No
storageAccounts / vmImages No No
vmImages No No

Microsoft.CognitiveServices

Resource type Supports tags Tag in cost report
accounts Yes Yes
accounts / networkSecurityPerimeterAssociationProxies No No
accounts / privateEndpointConnectionProxies No No
accounts / privateEndpointConnections No No
accounts / privateLinkResources No No
deletedAccounts No No

Microsoft.Compute

Resource type Supports tags Tag in cost report
availabilitySets Yes Yes
capacityReservationGroups Yes Yes
capacityReservationGroups / capacityReservations Yes Yes
cloudServices Yes Yes
cloudServices / networkInterfaces No No
cloudServices / publicIPAddresses No No
cloudServices / roleInstances No No
cloudServices / roleInstances / networkInterfaces No No
cloudServices / roles No No
diskAccesses Yes Yes
diskEncryptionSets Yes Yes
disks Yes Yes
galleries Yes Yes
galleries / applications Yes No
galleries / applications / versions Yes No
galleries / images Yes No
galleries / images / versions Yes No
galleries / serviceArtifacts Yes Yes
hostGroups Yes Yes
hostGroups / hosts Yes Yes
images Yes Yes
proximityPlacementGroups Yes Yes
restorePointCollections Yes Yes
restorePointCollections / restorePoints No No
restorePointCollections / restorePoints / diskRestorePoints No No
sharedVMExtensions Yes Yes
sharedVMExtensions / versions Yes Yes
sharedVMImages Yes Yes
sharedVMImages / versions Yes Yes
snapshots Yes Yes
sshPublicKeys Yes Yes
virtualMachines Yes Yes
virtualMachines / applications Yes Yes
virtualMachines / extensions Yes Yes
virtualMachines / metricDefinitions No No
virtualMachines / runCommands Yes Yes
virtualMachineScaleSets Yes Yes
virtualMachineScaleSets / applications No No
virtualMachineScaleSets / extensions No No
virtualMachineScaleSets / networkInterfaces No No
virtualMachineScaleSets / publicIPAddresses No No
virtualMachineScaleSets / virtualMachines No No
virtualMachineScaleSets / virtualMachines / extensions No No
virtualMachineScaleSets / virtualMachines / networkInterfaces No No

Note

You can't add a tag to a virtual machine that has been marked as generalized. You mark a virtual machine as generalized with Set-AzVm -Generalized or az vm generalize.

Microsoft.ContainerInstance

Resource type Supports tags Tag in cost report
containerGroupProfiles Yes Yes
containerGroups Yes Yes
containerScaleSets Yes Yes
serviceAssociationLinks No No

Microsoft.ContainerRegistry

Resource type Supports tags Tag in cost report
registries Yes Yes
registries / agentPools Yes Yes
registries / builds No No
registries / builds / cancel No No
registries / builds / getLogLink No No
registries / buildTasks Yes Yes
registries / buildTasks / steps No No
registries / connectedRegistries No No
registries / connectedRegistries / deactivate No No
registries / eventGridFilters No No
registries / exportPipelines No No
registries / generateCredentials No No
registries / getBuildSourceUploadUrl No No
registries / GetCredentials No No
registries / importImage No No
registries / importPipelines No No
registries / pipelineRuns No No
registries / privateEndpointConnectionProxies No No
registries / privateEndpointConnectionProxies / validate No No
registries / privateEndpointConnections No No
registries / privateLinkResources No No
registries / queueBuild No No
registries / regenerateCredential No No
registries / regenerateCredentials No No
registries / replications Yes Yes
registries / runs No No
registries / runs / cancel No No
registries / scheduleRun No No
registries / scopeMaps No No
registries / taskRuns No No
registries / tasks Yes Yes
registries / tokens No No
registries / updatePolicies No No
registries / webhooks Yes Yes
registries / webhooks / getCallbackConfig No No
registries / webhooks / ping No No

Microsoft.ContainerService

Resource type Supports tags Tag in cost report
containerServices Yes Yes
fleetMemberships No No
fleets Yes Yes
fleets / members No No
managedClusters Yes Yes
ManagedClusters / eventGridFilters No No
managedclustersnapshots Yes Yes
snapshots Yes Yes

Microsoft.DataBox

Resource type Supports tags Tag in cost report
jobs Yes Yes
jobs / eventGridFilters No No

Microsoft.Databricks

Resource type Supports tags Tag in cost report
accessConnectors Yes Yes
workspaces Yes Yes
workspaces / dbWorkspaces No No
workspaces / virtualNetworkPeerings No No

Microsoft.DataFactory

Resource type Supports tags Tag in cost report
dataFactories Yes Yes
dataFactories / diagnosticSettings No No
dataFactories / metricDefinitions No No
dataFactorySchema No No
factories Yes Yes
factories / integrationRuntimes No No
factories / pipelines No No

Note

If you have Azure-SSIS integration runtimes in your data factory, their running cost will be tagged with data factory tags. Running Azure-SSIS integration runtimes must be stopped and restarted for new data factory tags to be applied to their running cost.

Microsoft.DataMigration

Resource type Supports tags Tag in cost report
DatabaseMigrations No No
services Yes Yes
services / projects Yes Yes
slots Yes Yes
SqlMigrationServices Yes Yes

Microsoft.DBforMariaDB

Resource type Supports tags Tag in cost report
servers Yes Yes
servers / advisors No No
servers / keys No No
servers / privateEndpointConnectionProxies No No
servers / privateEndpointConnections No No
servers / privateLinkResources No No
servers / queryTexts No No
servers / recoverableServers No No
servers / resetQueryPerformanceInsightData No No
servers / topQueryStatistics No No
servers / virtualNetworkRules No No
servers / waitStatistics No No

Microsoft.DBforMySQL

Resource type Supports tags Tag in cost report
assessForMigration No No
flexibleServers Yes Yes
getPrivateDnsZoneSuffix No No
servers Yes Yes
servers / advisors No No
servers / keys No No
servers / privateEndpointConnectionProxies No No
servers / privateEndpointConnections No No
servers / privateLinkResources No No
servers / queryTexts No No
servers / recoverableServers No No
servers / resetQueryPerformanceInsightData No No
servers / topQueryStatistics No No
servers / virtualNetworkRules No No
servers / waitStatistics No No

Microsoft.DBforPostgreSQL

Resource type Supports tags Tag in cost report
flexibleServers Yes Yes
getPrivateDnsZoneSuffix No No
serverGroups Yes Yes
serverGroupsv2 Yes Yes
servers Yes Yes
servers / advisors No No
servers / keys No No
servers / privateEndpointConnectionProxies No No
servers / privateEndpointConnections No No
servers / privateLinkResources No No
servers / queryTexts No No
servers / recoverableServers No No
servers / resetQueryPerformanceInsightData No No
servers / topQueryStatistics No No
servers / virtualNetworkRules No No
servers / waitStatistics No No
serversv2 Yes Yes

Microsoft.DesktopVirtualization

Resource type Supports tags Tag in cost report
applicationgroups Yes Yes
applicationgroups / applications No No
applicationgroups / desktops No No
applicationgroups / startmenuitems No No
hostpools Yes Yes
hostpools / msixpackages No No
hostpools / sessionhosts No No
hostpools / sessionhosts / usersessions No No
hostpools / usersessions No No
scalingplans Yes Yes
workspaces Yes Yes

Microsoft.DevAI

Resource type Supports tags Tag in cost report
instances Yes Yes
instances / experiments Yes Yes
instances / sandboxes Yes Yes
instances / sandboxes / experiments Yes Yes

Microsoft.Devices

Resource type Supports tags Tag in cost report
IotHubs Yes Yes
IotHubs / eventGridFilters No No
IotHubs / failover No No
IotHubs / securitySettings No No
ProvisioningServices Yes Yes
usages No No

Microsoft.DocumentDB

Resource type Supports tags Tag in cost report
cassandraClusters Yes Yes
databaseAccountNames No No
databaseAccounts Yes Yes
databaseAccounts / encryptionScopes No No
restorableDatabaseAccounts No No

Microsoft.Elastic

Resource type Supports tags Tag in cost report
monitors Yes Yes
monitors / tagRules No No

Microsoft.EventGrid

Resource type Supports tags Tag in cost report
domains Yes Yes
domains / topics No No
eventSubscriptions No No
extensionTopics No No
namespaces Yes Yes
partnerConfigurations Yes Yes
partnerDestinations Yes Yes
partnerNamespaces Yes Yes
partnerNamespaces / channels No No
partnerNamespaces / eventChannels No No
partnerRegistrations Yes Yes
partnerTopics Yes Yes
partnerTopics / eventSubscriptions No No
systemTopics Yes Yes
systemTopics / eventSubscriptions No No
topics Yes Yes
topicTypes No No
verifiedPartners No No

Microsoft.EventHub

Resource type Supports tags Tag in cost report
clusters Yes Yes
namespaces Yes Yes
namespaces / applicationGroups No No
namespaces / authorizationrules No No
namespaces / disasterrecoveryconfigs No No
namespaces / eventhubs No No
namespaces / eventhubs / authorizationrules No No
namespaces / eventhubs / consumergroups No No
namespaces / networkrulesets No No
namespaces / privateEndpointConnections No No

Microsoft.Features

Resource type Supports tags Tag in cost report
featureConfigurations No No
featureProviderNamespaces No No
featureProviders No No
features No No
providers No No
subscriptionFeatureRegistrations No No

Microsoft.GuestConfiguration

Resource type Supports tags Tag in cost report
guestConfigurationAssignments No No

Microsoft.HDInsight

Resource type Supports tags Tag in cost report
clusterPools Yes Yes
clusterPools / clusters Yes Yes
clusterPools / clusters / instanceViews No No
clusterPools / clusters / serviceConfigs No No
clusterPools / clusters / sessionClusters Yes Yes
clusterPools / clusters / sessionClusters / instanceViews No No
clusterPools / clusters / sessionClusters / serviceConfigs No No
clusters Yes Yes
clusters / applications No No

Microsoft.ImportExport

Resource type Supports tags Tag in cost report
jobs Yes Yes

microsoft.insights

Resource type Supports tags Tag in cost report
actiongroups Yes Yes
actiongroups / networkSecurityPerimeterAssociationProxies No No
actiongroups / networkSecurityPerimeterConfigurations No No
activityLogAlerts Yes Yes
alertrules Yes Yes
autoscalesettings Yes Yes
components Yes Yes
components / aggregate No No
components / analyticsItems No No
components / annotations No No
components / api No No
components / apiKeys No No
components / currentBillingFeatures No No
components / defaultWorkItemConfig No No
components / events No No
components / exportConfiguration No No
components / extendQueries No No
components / favorites No No
components / featureCapabilities No No
components / generateDiagnosticServiceReadOnlyToken No No
components / generateDiagnosticServiceReadWriteToken No No
components / linkedstorageaccounts No No
components / metadata No No
components / metricDefinitions No No
components / metrics No No
components / move No No
components / myAnalyticsItems No No
components / myFavorites No No
components / pricingPlans No No
components / proactiveDetectionConfigs No No
components / purge No No
components / query No No
components / quotaStatus No No
components / webtests No No
components / workItemConfigs No No
createnotifications No No
dataCollectionEndpoints Yes Yes
dataCollectionEndpoints / networkSecurityPerimeterAssociationProxies No No
dataCollectionEndpoints / networkSecurityPerimeterConfigurations No No
dataCollectionEndpoints / scopedPrivateLinkProxies No No
dataCollectionRuleAssociations No No
dataCollectionRules Yes Yes
diagnosticSettings No No
diagnosticSettingsCategories No No
eventCategories No No
eventtypes No No
extendedDiagnosticSettings No No
generateDiagnosticServiceReadOnlyToken No No
generateDiagnosticServiceReadWriteToken No No
guestDiagnosticSettings Yes Yes
guestDiagnosticSettingsAssociation No No
logDefinitions No No
logprofiles No No
logs No No
metricalerts Yes Yes
metricbaselines No No
metricbatch No No
metricDefinitions No No
metricNamespaces No No
metrics No No
migratealertrules No No
migrateToNewPricingModel No No
monitoredObjects No No
myWorkbooks No No
notificationgroups Yes Yes
notificationstatus No No
privateLinkScopes Yes Yes
privateLinkScopes / privateEndpointConnectionProxies No No
privateLinkScopes / privateEndpointConnections No No
privateLinkScopes / scopedResources No No
rollbackToLegacyPricingModel No No
scheduledqueryrules Yes Yes
scheduledqueryrules / networkSecurityPerimeterAssociationProxies No No
scheduledqueryrules / networkSecurityPerimeterConfigurations No No
topology No No
transactions No No
webtests Yes Yes
webtests / getTestResultFile No No
workbooks Yes Yes
workbooktemplates Yes Yes

Microsoft.IoTCentral

Resource type Supports tags Tag in cost report
appTemplates No No
IoTApps Yes Yes

Microsoft.IoTSecurity

Resource type Supports tags Tag in cost report
alertTypes No No
defenderSettings No No
onPremiseSensors No No
recommendationTypes No No
sensors No No
sites No No

Microsoft.KeyVault

Resource type Supports tags Tag in cost report
deletedManagedHSMs No No
deletedVaults No No
hsmPools Yes Yes
managedHSMs Yes Yes
vaults Yes Yes
vaults / accessPolicies No No
vaults / eventGridFilters No No
vaults / keys No No
vaults / keys / versions No No
vaults / secrets Yes No

Microsoft.Kubernetes

Resource type Supports tags Tag in cost report
connectedClusters Yes Yes
registeredSubscriptions No No

Microsoft.Kusto

Resource type Supports tags Tag in cost report
clusters Yes Yes
clusters / attacheddatabaseconfigurations No No
clusters / databases No No
clusters / databases / dataconnections No No
clusters / databases / eventhubconnections No No
clusters / databases / principalassignments No No
clusters / databases / scripts No No
clusters / dataconnections No No
clusters / principalassignments No No
clusters / sharedidentities No No

Microsoft.Logic

Resource type Supports tags Tag in cost report
hostingEnvironments Yes Yes
integrationAccounts Yes Yes
integrationServiceEnvironments Yes Yes
integrationServiceEnvironments / managedApis Yes Yes
isolatedEnvironments Yes Yes
workflows Yes Yes

Microsoft.MachineLearningServices

Resource type Supports tags Tag in cost report
aisysteminventories Yes Yes
registries Yes Yes
registries / codes No No
registries / codes / versions No No
registries / components No No
registries / components / versions No No
registries / environments No No
registries / environments / versions No No
registries / models No No
registries / models / versions No No
virtualclusters Yes Yes
workspaces Yes Yes
workspaces / batchEndpoints Yes Yes
workspaces / batchEndpoints / deployments Yes Yes
workspaces / batchEndpoints / deployments / jobs No No
workspaces / batchEndpoints / jobs No No
workspaces / codes No No
workspaces / codes / versions No No
workspaces / components No No
workspaces / components / versions No No
workspaces / computes No No
workspaces / data No No
workspaces / data / versions No No
workspaces / datasets No No
workspaces / datastores No No
workspaces / environments No No
workspaces / environments / versions No No
workspaces / eventGridFilters No No
workspaces / jobs No No
workspaces / labelingJobs No No
workspaces / linkedServices No No
workspaces / models No No
workspaces / models / versions No No
workspaces / onlineEndpoints Yes Yes
workspaces / onlineEndpoints / deployments Yes Yes
workspaces / schedules No No
workspaces / services No No

Note

Workspace tags don't propagate to compute clusters and compute instances.

Microsoft.Maintenance

Resource type Supports tags Tag in cost report
applyUpdates No No
configurationAssignments No No
maintenanceConfigurations Yes Yes
publicMaintenanceConfigurations No No
updates No No

Microsoft.ManagedIdentity

Resource type Supports tags Tag in cost report
Identities No No
userAssignedIdentities Yes Yes
userAssignedIdentities / federatedIdentityCredentials No No

Microsoft.ManagedServices

Resource type Supports tags Tag in cost report
marketplaceRegistrationDefinitions No No
registrationAssignments No No
registrationDefinitions No No

Microsoft.Management

Resource type Supports tags Tag in cost report
getEntities No No
managementGroups No No
managementGroups / settings No No
resources No No
startTenantBackfill No No
tenantBackfillStatus No No

Microsoft.Media

Resource type Supports tags Tag in cost report
mediaservices Yes Yes
mediaservices / accountFilters No No
mediaservices / assets No No
mediaservices / assets / assetFilters No No
mediaservices / assets / tracks No No
mediaservices / contentKeyPolicies No No
mediaservices / eventGridFilters No No
mediaservices / graphInstances No No
mediaservices / graphTopologies No No
mediaservices / liveEvents Yes Yes
mediaservices / liveEvents / liveOutputs No No
mediaservices / mediaGraphs No No
mediaservices / privateEndpointConnectionProxies No No
mediaservices / privateEndpointConnections No No
mediaservices / streamingEndpoints Yes Yes
mediaservices / streamingLocators No No
mediaservices / streamingPolicies No No
mediaservices / transforms No No
mediaservices / transforms / jobs No No
videoAnalyzers Yes Yes
videoAnalyzers / accessPolicies No No
videoAnalyzers / edgeModules No No
videoAnalyzers / livePipelines No No
videoAnalyzers / pipelineJobs No No
videoAnalyzers / pipelineTopologies No No
videoAnalyzers / videos No No

Microsoft.Migrate

Resource type Supports tags Tag in cost report
assessmentProjects Yes Yes
migrateprojects Yes Yes
modernizeProjects Yes Yes
moveCollections Yes Yes
projects Yes Yes

Microsoft.Network

Resource type Supports tags Tag in cost report
applicationGateways Yes Yes
applicationGatewayWebApplicationFirewallPolicies Yes Yes
applicationSecurityGroups Yes Yes
azureFirewallFqdnTags No No
azureFirewalls Yes No
azureWebCategories No No
bastionHosts Yes Yes
bgpServiceCommunities No No
cloudServiceSlots No No
connections Yes Yes
customIpPrefixes Yes Yes
ddosCustomPolicies Yes Yes
ddosProtectionPlans Yes Yes
dnsForwardingRulesets Yes Yes
dnsForwardingRulesets / forwardingRules No No
dnsForwardingRulesets / virtualNetworkLinks No No
dnsResolvers Yes Yes
dnsResolvers / inboundEndpoints Yes Yes
dnsResolvers / outboundEndpoints Yes Yes
dnszones Yes Yes
dnszones / A No No
dnszones / AAAA No No
dnszones / all No No
dnszones / CAA No No
dnszones / CNAME No No
dnszones / MX No No
dnszones / NS No No
dnszones / PTR No No
dnszones / recordsets No No
dnszones / SOA No No
dnszones / SRV No No
dnszones / TXT No No
dscpConfigurations Yes Yes
expressRouteCircuits Yes Yes
expressRouteCrossConnections Yes Yes
expressRouteGateways Yes Yes
expressRoutePorts Yes Yes
expressRouteProviderPorts No No
expressRouteServiceProviders No No
firewallPolicies Yes, see note below Yes
frontdoors Yes, but limited (see note below) Yes
frontdoors / frontendEndpoints Yes, but limited (see note below) No
frontdoors / frontendEndpoints / customHttpsConfiguration Yes, but limited (see note below) No
frontdoorWebApplicationFirewallManagedRuleSets Yes, but limited (see note below) No
frontdoorWebApplicationFirewallPolicies Yes, but limited (see note below) Yes
getDnsResourceReference No No
internalNotify No No
internalPublicIpAddresses No No
ipGroups Yes Yes
loadBalancers Yes Yes
localNetworkGateways Yes Yes
natGateways Yes Yes
networkExperimentProfiles Yes Yes
networkIntentPolicies Yes Yes
networkInterfaces Yes Yes
networkManagerConnections No No
networkManagers Yes Yes
networkProfiles Yes Yes
networkSecurityGroups Yes Yes
networkSecurityPerimeters Yes Yes
networkVirtualAppliances Yes Yes
networkWatchers Yes Yes
networkWatchers / connectionMonitors Yes No
networkWatchers / flowLogs Yes Yes
networkWatchers / lenses Yes No
networkWatchers / pingMeshes Yes No
p2sVpnGateways Yes Yes
privateDnsZones Yes Yes
privateDnsZones / A No No
privateDnsZones / AAAA No No
privateDnsZones / all No No
privateDnsZones / CNAME No No
privateDnsZones / MX No No
privateDnsZones / PTR No No
privateDnsZones / SOA No No
privateDnsZones / SRV No No
privateDnsZones / TXT No No
privateDnsZones / virtualNetworkLinks Yes Yes
privateDnsZonesInternal No No
privateEndpointRedirectMaps Yes Yes
privateEndpoints Yes Yes
privateEndpoints / privateLinkServiceProxies No No
privateLinkServices Yes Yes
publicIPAddresses Yes Yes
publicIPPrefixes Yes Yes
routeFilters Yes Yes
routeTables Yes Yes
securityPartnerProviders Yes Yes
serviceEndpointPolicies Yes Yes
trafficManagerGeographicHierarchies No No
trafficmanagerprofiles Yes, see note below Yes
trafficmanagerprofiles / azureendpoints No No
trafficmanagerprofiles / externalendpoints No No
trafficmanagerprofiles / heatMaps No No
trafficmanagerprofiles / nestedendpoints No No
trafficManagerUserMetricsKeys No No
virtualHubs Yes Yes
virtualNetworkGateways Yes Yes
virtualNetworks Yes Yes
virtualNetworks / privateDnsZoneLinks No No
virtualNetworks / taggedTrafficConsumers No No
virtualNetworkTaps Yes Yes
virtualRouters Yes Yes
virtualWans Yes Yes
vpnGateways Yes Yes
vpnServerConfigurations Yes Yes
vpnSites Yes Yes

Microsoft.NetworkCloud

Resource type Supports tags Tag in cost report
bareMetalMachines Yes Yes
cloudServicesNetworks Yes Yes
clusterManagers Yes Yes
clusters Yes Yes
clusters / admissions No No
defaultCniNetworks Yes Yes
disks Yes Yes
hybridAksClusters Yes Yes
hybridAksManagementDomains Yes Yes
hybridAksVirtualMachines Yes Yes
l2Networks Yes Yes
l3Networks Yes Yes
rackManifests Yes Yes
racks Yes Yes
storageAppliances Yes Yes
trunkedNetworks Yes Yes
virtualMachines Yes Yes
workloadNetworks Yes Yes

Microsoft.NotificationHubs

Resource type Supports tags Tag in cost report
namespaces Yes No
namespaces / notificationHubs Yes No

Microsoft.OpenLogisticsPlatform

Resource type Supports tags Tag in cost report
applicationManagers Yes Yes
applicationManagers / applicationRegistrations No No
applicationManagers / eventGridFilters No No
applicationRegistrationInvites No No
applicationWorkspaces Yes Yes
applicationWorkspaces / applications No No
applicationWorkspaces / applications / applicationRegistrationInvites No No
shareInvites No No
workspaces Yes Yes
workspaces / applicationRegistrations No No
workspaces / applications No No
workspaces / eventGridFilters No No
workspaces / shares No No
workspaces / shareSubscriptions No No

Microsoft.OperationalInsights

Resource type Supports tags Tag in cost report
clusters Yes Yes
deletedWorkspaces No No
linkTargets No No
querypacks Yes Yes
storageInsightConfigs No No
workspaces Yes Yes
workspaces / dataExports No No
workspaces / dataSources No No
workspaces / linkedServices No No
workspaces / linkedStorageAccounts No No
workspaces / metadata No No
workspaces / networkSecurityPerimeterAssociationProxies No No
workspaces / networkSecurityPerimeterConfigurations No No
workspaces / query No No
workspaces / scopedPrivateLinkProxies No No
workspaces / storageInsightConfigs No No
workspaces / tables No No

Microsoft.Orbital

Resource type Supports tags Tag in cost report
contactProfiles Yes Yes
edgeSites Yes Yes
globalCommunicationsSites No No
groundStations Yes Yes
l2Connections Yes Yes
l3Connections Yes Yes
orbitalGateways Yes Yes
spacecrafts Yes Yes
spacecrafts / contacts No No

Microsoft.PolicyInsights

Resource type Supports tags Tag in cost report
attestations No No
componentPolicyStates No No
eventGridFilters No No
policyEvents No No
policyMetadata No No
policyStates No No
policyTrackedResources No No
remediations No No

Microsoft.Portal

Resource type Supports tags Tag in cost report
consoles No No
dashboards Yes Yes
tenantconfigurations No No
userSettings No No

Microsoft.PowerBI

Resource type Supports tags Tag in cost report
privateLinkServicesForPowerBI Yes Yes
tenants Yes Yes
tenants / workspaces No No
workspaceCollections Yes Yes

Microsoft.PowerBIDedicated

Resource type Supports tags Tag in cost report
autoScaleVCores Yes Yes
capacities Yes Yes
servers Yes Yes

Microsoft.ProviderHub

Resource type Supports tags Tag in cost report
providerRegistrations No No
providerRegistrations / customRollouts No No
providerRegistrations / defaultRollouts No No
providerRegistrations / resourceActions No No
providerRegistrations / resourceTypeRegistrations No No

Microsoft.RecoveryServices

Resource type Supports tags Tag in cost report
backupProtectedItems No No
vaults Yes Yes

Microsoft.Relay

Resource type Supports tags Tag in cost report
namespaces Yes Yes
namespaces / authorizationrules No No
namespaces / hybridconnections No No
namespaces / hybridconnections / authorizationrules No No
namespaces / privateEndpointConnections No No
namespaces / wcfrelays No No
namespaces / wcfrelays / authorizationrules No No

Microsoft.ResourceGraph

Resource type Supports tags Tag in cost report
queries Yes Yes
resourceChangeDetails No No
resourceChanges No No
resources No No
resourcesHistory No No
subscriptionsStatus No No

Microsoft.ResourceHealth

Resource type Supports tags Tag in cost report
childResources No No
emergingissues No No
events No No
impactedResources No No
metadata No No

Microsoft.Resources

Resource type Supports tags Tag in cost report
deployments Yes No
deploymentScripts Yes Yes
deploymentScripts / logs No No
deploymentStacks / snapshots No No
links No No
resourceGroups Yes No
snapshots No No
subscriptions Yes No
tags No No
templateSpecs Yes Yes
templateSpecs / versions Yes Yes
tenants No No
validateResources No No

Microsoft.Search

Resource type Supports tags Tag in cost report
resourceHealthMetadata No No
searchServices Yes Yes

Microsoft.Security

Resource type Supports tags Tag in cost report
adaptiveNetworkHardenings No No
advancedThreatProtectionSettings No No
alerts No No
alertsSuppressionRules No No
allowedConnections No No
antiMalwareSettings No No
applications No No
assessmentMetadata No No
assessments No No
assessments / governanceAssignments No No
assignments Yes Yes
attackPaths No No
autoDismissAlertsRules No No
automations Yes Yes
AutoProvisioningSettings No No
Compliances No No
connectedContainerRegistries No No
connectors No No
customAssessmentAutomations Yes Yes
customEntityStoreAssignments Yes Yes
dataCollectionAgents No No
dataScanners Yes Yes
dataSensitivitySettings No No
deviceSecurityGroups No No
discoveredSecuritySolutions No No
externalSecuritySolutions No No
governanceRules No No
InformationProtectionPolicies No No
ingestionSettings No No
insights No No
iotSecuritySolutions Yes Yes
iotSecuritySolutions / analyticsModels No No
iotSecuritySolutions / analyticsModels / aggregatedAlerts No No
iotSecuritySolutions / analyticsModels / aggregatedRecommendations No No
iotSecuritySolutions / iotAlerts No No
iotSecuritySolutions / iotAlertTypes No No
iotSecuritySolutions / iotRecommendations No No
iotSecuritySolutions / iotRecommendationTypes No No
jitNetworkAccessPolicies No No
jitPolicies No No
MdeOnboardings No No
policies No No
pricings No No
query No No
regulatoryComplianceStandards No No
regulatoryComplianceStandards / regulatoryComplianceControls No No
regulatoryComplianceStandards / regulatoryComplianceControls / regulatoryComplianceAssessments No No
secureScoreControlDefinitions No No
secureScoreControls No No
secureScores No No
secureScores / secureScoreControls No No
securityConnectors Yes Yes
securityContacts No No
securitySolutions No No
securitySolutionsReferenceData No No
securityStatuses No No
securityStatusesSummaries No No
serverVulnerabilityAssessments No No
serverVulnerabilityAssessmentsSettings No No
settings No No
sqlVulnerabilityAssessments No No
standards Yes Yes
subAssessments No No
tasks No No
topologies No No
vmScanners No No
workspaceSettings No No

Microsoft.ServiceBus

Resource type Supports tags Tag in cost report
namespaces Yes Yes
namespaces / authorizationrules No No
namespaces / disasterrecoveryconfigs No No
namespaces / eventgridfilters No No
namespaces / networkrulesets No No
namespaces / privateEndpointConnections No No
namespaces / queues No No
namespaces / queues / authorizationrules No No
namespaces / topics No No
namespaces / topics / authorizationrules No No
namespaces / topics / subscriptions No No
namespaces / topics / subscriptions / rules No No
premiumMessagingRegions No No

Microsoft.ServiceFabric

Resource type Supports tags Tag in cost report
clusters Yes Yes
clusters / applications No No
clusters / applications / services No No
clusters / applicationTypes No No
clusters / applicationTypes / versions No No
edgeclusters Yes Yes
edgeclusters / applications No No
managedclusters Yes Yes
managedclusters / applications No No
managedclusters / applications / services No No
managedclusters / applicationTypes No No
managedclusters / applicationTypes / versions No No
managedclusters / nodetypes No No

Microsoft.SignalRService

Resource type Supports tags Tag in cost report
SignalR Yes Yes
SignalR / eventGridFilters No No
WebPubSub Yes Yes

Microsoft.Solutions

Resource type Supports tags Tag in cost report
applicationDefinitions Yes Yes
applications Yes Yes
jitRequests Yes Yes

Microsoft.Sql

Resource type Supports tags Tag in cost report
instancePools Yes Yes
managedInstances Yes Yes
managedInstances / administrators No No
managedInstances / advancedThreatProtectionSettings No No
managedInstances / databases Yes No
managedInstances / databases / advancedThreatProtectionSettings No No
managedInstances / databases / backupLongTermRetentionPolicies No No
managedInstances / databases / vulnerabilityAssessments No No
managedInstances / dnsAliases No No
managedInstances / metricDefinitions No No
managedInstances / metrics No No
managedInstances / recoverableDatabases No No
managedInstances / sqlAgent No No
managedInstances / startStopSchedules No No
managedInstances / tdeCertificates No No
managedInstances / vulnerabilityAssessments No No
servers Yes Yes
servers / administrators No No
servers / advancedThreatProtectionSettings No No
servers / advisors No No
servers / aggregatedDatabaseMetrics No No
servers / auditingSettings No No
servers / automaticTuning No No
servers / communicationLinks No No
servers / connectionPolicies No No
servers / databases Yes Yes
servers / databases / activate No No
servers / databases / activatedatabase No No
servers / databases / advancedThreatProtectionSettings No No
servers / databases / advisors No No
servers / databases / auditingSettings No No
servers / databases / auditRecords No No
servers / databases / automaticTuning No No
servers / databases / backupLongTermRetentionPolicies No No
servers / databases / backupShortTermRetentionPolicies No No
servers / databases / databaseState No No
servers / databases / dataMaskingPolicies No No
servers / databases / dataMaskingPolicies / rules No No
servers / databases / deactivate No No
servers / databases / deactivatedatabase No No
servers / databases / extensions No No
servers / databases / geoBackupPolicies No No
servers / databases / ledgerDigestUploads No No
servers / databases / metricDefinitions No No
servers / databases / metrics No No
servers / databases / recommendedSensitivityLabels No No
servers / databases / securityAlertPolicies No No
servers / databases / sqlvulnerabilityassessments No No
servers / databases / syncGroups No No
servers / databases / syncGroups / syncMembers No No
servers / databases / topQueries No No
servers / databases / topQueries / queryText No No
servers / databases / transparentDataEncryption No No
servers / databases / VulnerabilityAssessment No No
servers / databases / vulnerabilityAssessments No No
servers / databases / VulnerabilityAssessmentScans No No
servers / databases / VulnerabilityAssessmentSettings No No
servers / databases / workloadGroups No No
servers / databaseSecurityPolicies No No
servers / devOpsAuditingSettings No No
servers / disasterRecoveryConfiguration No No
servers / dnsAliases No No
servers / elasticPoolEstimates No No
servers / elasticpools Yes Yes
servers / elasticPools / advisors No No
servers / elasticpools / metricdefinitions No No
servers / elasticpools / metrics No No
servers / encryptionProtector No No
servers / extendedAuditingSettings No No
servers / failoverGroups No No
servers / import No No
servers / jobAccounts Yes Yes
servers / jobAgents Yes Yes
servers / jobAgents / jobs No No
servers / jobAgents / jobs / executions No No
servers / jobAgents / jobs / steps No No
servers / keys No No
servers / recommendedElasticPools No No
servers / recoverableDatabases No No
servers / restorableDroppedDatabases No No
servers / securityAlertPolicies No No
servers / serviceObjectives No No
servers / sqlvulnerabilityassessments No No
servers / syncAgents No No
servers / tdeCertificates No No
servers / usages No No
servers / virtualNetworkRules No No
servers / vulnerabilityAssessments No No
virtualClusters No No

Note

The Master database doesn't support tags, but other databases, including Azure Synapse Analytics databases, support tags. Azure Synapse Analytics databases must be in Active (not Paused) state.

Microsoft.SqlVirtualMachine

Resource type Supports tags Tag in cost report
SqlVirtualMachineGroups Yes Yes
SqlVirtualMachines Yes Yes

Microsoft.Storage

Resource type Supports tags Tag in cost report
dataMovers Yes Yes
dataMovers / agents No No
dataMovers / endpoints No No
dataMovers / projects No No
dataMovers / projects / jobDefinitions No No
dataMovers / projects / jobDefinitions / jobRuns No No
deletedAccounts No No
storageAccounts Yes Yes
storageAccounts / blobServices No No
storageAccounts / encryptionScopes No No
storageAccounts / fileServices No No
storageAccounts / queueServices No No
storageAccounts / services No No
storageAccounts / services / metricDefinitions No No
storageAccounts / storageTaskAssignments No No
storageAccounts / tableServices No No
storageTasks Yes Yes
usages No No

Microsoft.StorageSync

Resource type Supports tags Tag in cost report
storageSyncServices Yes Yes
storageSyncServices / registeredServers No No
storageSyncServices / syncGroups No No
storageSyncServices / syncGroups / cloudEndpoints No No
storageSyncServices / syncGroups / serverEndpoints No No
storageSyncServices / workflows No No

Microsoft.StreamAnalytics

Resource type Supports tags Tag in cost report
clusters Yes Yes
clusters / privateEndpoints No No
streamingjobs Yes Yes

Note

You can't add a tag when streamingjobs is running. Stop the resource to add a tag.

Microsoft.Synapse

Resource type Supports tags Tag in cost report
privateLinkHubs Yes Yes
workspaces Yes Yes
workspaces / bigDataPools Yes Yes
workspaces / kustoPools Yes Yes
workspaces / kustoPools / attacheddatabaseconfigurations No No
workspaces / kustoPools / databases No No
workspaces / kustoPools / databases / dataconnections No No
workspaces / sqlDatabases Yes Yes
workspaces / sqlPools Yes Yes

Note

The Master database doesn't support tags, but other databases, including Azure Synapse Analytics databases, support tags. Azure Synapse Analytics databases must be in Active (not Paused) state.

Microsoft.TimeSeriesInsights

Resource type Supports tags Tag in cost report
environments Yes No
environments / accessPolicies No No
environments / eventsources Yes No
environments / privateEndpointConnectionProxies No No
environments / privateEndpointConnections No No
environments / privateLinkResources No No
environments / referenceDataSets Yes No

Microsoft.Web

Resource type Supports tags Tag in cost report
apiManagementAccounts No No
apiManagementAccounts / apiAcls No No
apiManagementAccounts / apis No No
apiManagementAccounts / apis / apiAcls No No
apiManagementAccounts / apis / connectionAcls No No
apiManagementAccounts / apis / connections No No
apiManagementAccounts / apis / connections / connectionAcls No No
apiManagementAccounts / apis / localizedDefinitions No No
apiManagementAccounts / connectionAcls No No
apiManagementAccounts / connections No No
billingMeters No No
certificates Yes Yes
connectionGateways Yes Yes
connections Yes Yes
containerApps Yes Yes
customApis Yes Yes
customhostnameSites No No
deletedSites No No
functionAppStacks No No
generateGithubAccessTokenForAppserviceCLI No No
hostingEnvironments Yes Yes
hostingEnvironments / eventGridFilters No No
hostingEnvironments / multiRolePools No No
hostingEnvironments / workerPools No No
kubeEnvironments Yes Yes
publishingUsers No No
recommendations No No
resourceHealthMetadata No No
runtimes No No
serverFarms Yes Yes
serverFarms / eventGridFilters No No
serverFarms / firstPartyApps No No
serverFarms / firstPartyApps / keyVaultSettings No No
sites Yes Yes
sites / eventGridFilters No No
sites / hostNameBindings No No
sites / networkConfig No No
sites / premieraddons Yes Yes
sites / slots Yes Yes
sites / slots / eventGridFilters No No
sites / slots / hostNameBindings No No
sites / slots / networkConfig No No
sourceControls No No
staticSites Yes Yes
staticSites / builds No No
staticSites / builds / linkedBackends No No
staticSites / builds / userProvidedFunctionApps No No
staticSites / linkedBackends No No
staticSites / userProvidedFunctionApps No No
validate No No
verifyHostingEnvironmentVnet No No
webAppStacks No No
workerApps Yes Yes

Microsoft.Workloads

Resource type Supports tags Tag in cost report
monitors Yes Yes
monitors / providerInstances No No
phpWorkloads Yes Yes
phpWorkloads / wordpressInstances No No
sapVirtualInstances Yes Yes
sapVirtualInstances / applicationInstances Yes Yes
sapVirtualInstances / centralInstances Yes Yes
sapVirtualInstances / databaseInstances Yes Yes

Next steps

To learn how to apply tags to resources, see Use tags to organize your Azure resources.