Tag support for Azure resources
This article describes whether a resource type supports tags. The column labeled Supports tags indicates whether the resource type has a property for the tag. The column labeled Tag in cost report indicates whether that resource type passes the tag to the cost report. You can view costs by tags in the the Azure billing invoice and daily usage data .
Microsoft.AAD
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| DomainServices | Yes | Yes |
| DomainServices / oucontainer | No | No |
microsoft.aadiam
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| azureADMetrics | Yes | Yes |
| diagnosticSettings | No | No |
| diagnosticSettingsCategories | No | No |
| privateLinkForAzureAD | Yes | Yes |
| tenants | Yes | Yes |
Microsoft.Advisor
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| advisorScore | No | No |
| configurations | No | No |
| generateRecommendations | No | No |
| metadata | No | No |
| predict | No | No |
| recommendations | No | No |
| suppressions | No | No |
Note
All Microsoft.Advisor resources are free and therefore not included in the cost report.
Microsoft.AlertsManagement
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| actionRules | Yes | Yes |
| alerts | No | No |
| alertsMetaData | No | No |
| migrateFromSmartDetection | No | No |
| smartDetectorAlertRules | Yes | Yes |
| smartGroups | No | No |
Microsoft.AnalysisServices
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| servers | Yes | Yes |
Microsoft.ApiManagement
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| deletedServices | No | No |
| getDomainOwnershipIdentifier | No | No |
| reportFeedback | No | No |
| service | Yes | Yes |
| service / eventGridFilters | No | No |
| validateServiceName | No | No |
Note
Azure API Management only supports creating a maximum of 15 tag name/value pairs for each service.
Microsoft.AppConfiguration
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| configurationStores | Yes | No |
| configurationStores / eventGridFilters | No | No |
| configurationStores / keyValues | No | No |
| configurationStores / replicas | No | No |
| deletedConfigurationStores | No | No |
Microsoft.AppPlatform
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| runtimeVersions | No | No |
| Spring | Yes | Yes |
| Spring / apps | No | No |
| Spring / apps / deployments | No | No |
Microsoft.Authorization
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| accessReviewHistoryDefinitions | No | No |
| classicAdministrators | No | No |
| dataAliases | No | No |
| dataPolicyManifests | No | No |
| denyAssignments | No | No |
| diagnosticSettings | No | No |
| diagnosticSettingsCategories | No | No |
| elevateAccess | No | No |
| eligibleChildResources | No | No |
| locks | No | No |
| policyAssignments | No | No |
| policyDefinitions | No | No |
| policyExemptions | No | No |
| policySetDefinitions | No | No |
| privateLinkAssociations | No | No |
| resourceManagementPrivateLinks | Yes | Yes |
| roleAssignmentApprovals | No | No |
| roleAssignments | No | No |
| roleAssignmentScheduleInstances | No | No |
| roleAssignmentScheduleRequests | No | No |
| roleAssignmentSchedules | No | No |
| roleDefinitions | No | No |
| roleEligibilityScheduleInstances | No | No |
| roleEligibilityScheduleRequests | No | No |
| roleEligibilitySchedules | No | No |
| roleManagementPolicies | No | No |
| roleManagementPolicyAssignments | No | No |
Microsoft.Automation
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| automationAccounts | Yes | Yes |
| automationAccounts / agentRegistrationInformation | No | No |
| automationAccounts / configurations | Yes | Yes |
| automationAccounts / hybridRunbookWorkerGroups | No | No |
| automationAccounts / hybridRunbookWorkerGroups / hybridRunbookWorkers | No | No |
| automationAccounts / jobs | No | No |
| automationAccounts / privateEndpointConnectionProxies | No | No |
| automationAccounts / privateEndpointConnections | No | No |
| automationAccounts / privateLinkResources | No | No |
| automationAccounts / runbooks | Yes | Yes |
| automationAccounts / runtimes | Yes | Yes |
| automationAccounts / softwareUpdateConfigurationMachineRuns | No | No |
| automationAccounts / softwareUpdateConfigurationRuns | No | No |
| automationAccounts / softwareUpdateConfigurations | No | No |
| automationAccounts / webhooks | No | No |
| deletedAutomationAccounts | No | No |
Note
Azure Automation only supports creating a maximum of 15 tag name/value pairs for each Automation resource.
Microsoft.AutonomousDevelopmentPlatform
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| accounts | Yes | Yes |
| accounts / datapools | No | No |
| workspaces | Yes | Yes |
| workspaces / eventgridfilters | No | No |
Microsoft.AzureActiveDirectory
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| b2cDirectories | Yes | No |
| b2ctenants | No | No |
| ciamDirectories | Yes | Yes |
| guestUsages | Yes | Yes |
Microsoft.AzureStack
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| cloudManifestFiles | No | No |
| generateDeploymentLicense | No | No |
| linkedSubscriptions | Yes | Yes |
| registrations | Yes | Yes |
| registrations / customerSubscriptions | No | No |
| registrations / products | No | No |
Microsoft.AzureStackHCI
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| clusters | Yes | Yes |
| clusters / arcSettings | No | No |
| clusters / arcSettings / extensions | No | No |
| clusters / offers | No | No |
| clusters / publishers | No | No |
| clusters / publishers / offers | No | No |
| clusters / updates | No | No |
| clusters / updates / updateRuns | No | No |
| clusters / updateSummaries | No | No |
| galleryImages | Yes | Yes |
| marketplaceGalleryImages | Yes | Yes |
| networkinterfaces | Yes | Yes |
| registeredSubscriptions | No | No |
| storageContainers | Yes | Yes |
| virtualharddisks | Yes | Yes |
| virtualmachines | Yes | Yes |
| virtualMachines / extensions | Yes | Yes |
| virtualmachines / hybrididentitymetadata | No | No |
| virtualnetworks | Yes | Yes |
Microsoft.Batch
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| batchAccounts | Yes | Yes |
| batchAccounts / certificates | No | No |
| batchAccounts / detectors | No | No |
| batchAccounts / pools | No | No |
Microsoft.Blueprint
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| blueprintAssignments | No | No |
| blueprints | No | No |
| blueprints / artifacts | No | No |
| blueprints / versions | No | No |
| blueprints / versions / artifacts | No | No |
Microsoft.Cache
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| Redis | Yes | Yes |
| Redis / EventGridFilters | No | No |
| Redis / privateEndpointConnectionProxies | No | No |
| Redis / privateEndpointConnectionProxies / validate | No | No |
| Redis / privateEndpointConnections | No | No |
| Redis / privateLinkResources | No | No |
| redisEnterprise | Yes | Yes |
| redisEnterprise / databases | No | No |
| RedisEnterprise / privateEndpointConnectionProxies | No | No |
| RedisEnterprise / privateEndpointConnectionProxies / validate | No | No |
| RedisEnterprise / privateEndpointConnections | No | No |
| RedisEnterprise / privateLinkResources | No | No |
Microsoft.Capacity
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| appliedReservations | No | No |
| autoQuotaIncrease | No | No |
| calculateExchange | No | No |
| calculatePrice | No | No |
| calculatePurchasePrice | No | No |
| catalogs | No | No |
| commercialReservationOrders | No | No |
| exchange | No | No |
| ownReservations | No | No |
| placePurchaseOrder | No | No |
| reservationOrders | No | No |
| reservationOrders / calculateRefund | No | No |
| reservationOrders / merge | No | No |
| reservationOrders / reservations | No | No |
| reservationOrders / reservations / revisions | No | No |
| reservationOrders / return | No | No |
| reservationOrders / split | No | No |
| reservationOrders / swap | No | No |
| reservations | No | No |
| resourceProviders | No | No |
| resources | No | No |
| validateReservationOrder | No | No |
Microsoft.Cdn
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| canMigrate | No | No |
| CdnWebApplicationFirewallManagedRuleSets | No | No |
| CdnWebApplicationFirewallPolicies | Yes | Yes |
| edgenodes | No | No |
| migrate | No | No |
| profiles | Yes | Yes |
| profiles / afdendpoints | Yes | Yes |
| profiles / afdendpoints / routes | No | No |
| profiles / customdomains | No | No |
| profiles / endpoints | Yes | Yes |
| profiles / endpoints / customdomains | No | No |
| profiles / endpoints / origingroups | No | No |
| profiles / endpoints / origins | No | No |
| profiles / origingroups | No | No |
| profiles / origingroups / origins | No | No |
| profiles / policies | No | No |
| profiles / rulesets | No | No |
| profiles / rulesets / rules | No | No |
| profiles / secrets | No | No |
| profiles / securitypolicies | No | No |
| validateProbe | No | No |
| validateSecret | No | No |
Microsoft.Chaos
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| artifactSetDefinitions | No | No |
| artifactSetSnapshots | No | No |
| experiments | Yes | Yes |
| targets | No | No |
Microsoft.ClassicCompute
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| capabilities | No | No |
| domainNames | No | No |
| domainNames / capabilities | No | No |
| domainNames / internalLoadBalancers | No | No |
| domainNames / serviceCertificates | No | No |
| domainNames / slots | No | No |
| domainNames / slots / roles | No | No |
| domainNames / slots / roles / metricDefinitions | No | No |
| domainNames / slots / roles / metrics | No | No |
| moveSubscriptionResources | No | No |
| operatingSystemFamilies | No | No |
| operatingSystems | No | No |
| quotas | No | No |
| resourceTypes | No | No |
| validateSubscriptionMoveAvailability | No | No |
| virtualMachines | No | No |
| virtualMachines / diagnosticSettings | No | No |
| virtualMachines / metricDefinitions | No | No |
| virtualMachines / metrics | No | No |
Microsoft.ClassicInfrastructureMigrate
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| classicInfrastructureResources | No | No |
Microsoft.ClassicNetwork
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| capabilities | No | No |
| expressRouteCrossConnections | No | No |
| expressRouteCrossConnections / peerings | No | No |
| gatewaySupportedDevices | No | No |
| networkSecurityGroups | No | No |
| quotas | No | No |
| reservedIps | No | No |
| virtualNetworks | No | No |
| virtualNetworks / remoteVirtualNetworkPeeringProxies | No | No |
| virtualNetworks / virtualNetworkPeerings | No | No |
Microsoft.ClassicStorage
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| capabilities | No | No |
| disks | No | No |
| images | No | No |
| osImages | No | No |
| osPlatformImages | No | No |
| publicImages | No | No |
| quotas | No | No |
| storageAccounts | No | No |
| storageAccounts / blobServices | No | No |
| storageAccounts / fileServices | No | No |
| storageAccounts / metricDefinitions | No | No |
| storageAccounts / metrics | No | No |
| storageAccounts / queueServices | No | No |
| storageAccounts / services | No | No |
| storageAccounts / services / diagnosticSettings | No | No |
| storageAccounts / services / metricDefinitions | No | No |
| storageAccounts / services / metrics | No | No |
| storageAccounts / tableServices | No | No |
| storageAccounts / vmImages | No | No |
| vmImages | No | No |
Microsoft.CognitiveServices
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| accounts | Yes | Yes |
| accounts / networkSecurityPerimeterAssociationProxies | No | No |
| accounts / privateEndpointConnectionProxies | No | No |
| accounts / privateEndpointConnections | No | No |
| accounts / privateLinkResources | No | No |
| deletedAccounts | No | No |
Microsoft.Compute
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| availabilitySets | Yes | Yes |
| capacityReservationGroups | Yes | Yes |
| capacityReservationGroups / capacityReservations | Yes | Yes |
| cloudServices | Yes | Yes |
| cloudServices / networkInterfaces | No | No |
| cloudServices / publicIPAddresses | No | No |
| cloudServices / roleInstances | No | No |
| cloudServices / roleInstances / networkInterfaces | No | No |
| cloudServices / roles | No | No |
| diskAccesses | Yes | Yes |
| diskEncryptionSets | Yes | Yes |
| disks | Yes | Yes |
| galleries | Yes | Yes |
| galleries / applications | Yes | No |
| galleries / applications / versions | Yes | No |
| galleries / images | Yes | No |
| galleries / images / versions | Yes | No |
| galleries / serviceArtifacts | Yes | Yes |
| hostGroups | Yes | Yes |
| hostGroups / hosts | Yes | Yes |
| images | Yes | Yes |
| proximityPlacementGroups | Yes | Yes |
| restorePointCollections | Yes | Yes |
| restorePointCollections / restorePoints | No | No |
| restorePointCollections / restorePoints / diskRestorePoints | No | No |
| sharedVMExtensions | Yes | Yes |
| sharedVMExtensions / versions | Yes | Yes |
| sharedVMImages | Yes | Yes |
| sharedVMImages / versions | Yes | Yes |
| snapshots | Yes | Yes |
| sshPublicKeys | Yes | Yes |
| virtualMachines | Yes | Yes |
| virtualMachines / applications | Yes | Yes |
| virtualMachines / extensions | Yes | Yes |
| virtualMachines / metricDefinitions | No | No |
| virtualMachines / runCommands | Yes | Yes |
| virtualMachineScaleSets | Yes | Yes |
| virtualMachineScaleSets / applications | No | No |
| virtualMachineScaleSets / extensions | No | No |
| virtualMachineScaleSets / networkInterfaces | No | No |
| virtualMachineScaleSets / publicIPAddresses | No | No |
| virtualMachineScaleSets / virtualMachines | No | No |
| virtualMachineScaleSets / virtualMachines / extensions | No | No |
| virtualMachineScaleSets / virtualMachines / networkInterfaces | No | No |
Note
You can't add a tag to a virtual machine that has been marked as generalized. You mark a virtual machine as generalized with Set-AzVm -Generalized or az vm generalize.
Microsoft.ConnectedVehicle
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| platformAccounts | Yes | Yes |
| registeredSubscriptions | No | No |
Microsoft.Consumption
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| AggregatedCost | No | No |
| Balances | No | No |
| Budgets | No | No |
| Charges | No | No |
| CostTags | No | No |
| credits | No | No |
| events | No | No |
| Forecasts | No | No |
| lots | No | No |
| Marketplaces | No | No |
| Pricesheets | No | No |
| products | No | No |
| ReservationDetails | No | No |
| ReservationRecommendationDetails | No | No |
| ReservationRecommendations | No | No |
| ReservationSummaries | No | No |
| ReservationTransactions | No | No |
Microsoft.ContainerInstance
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| containerGroupProfiles | Yes | Yes |
| containerGroups | Yes | Yes |
| containerScaleSets | Yes | Yes |
| serviceAssociationLinks | No | No |
Microsoft.ContainerRegistry
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| registries | Yes | Yes |
| registries / agentPools | Yes | Yes |
| registries / builds | No | No |
| registries / builds / cancel | No | No |
| registries / builds / getLogLink | No | No |
| registries / buildTasks | Yes | Yes |
| registries / buildTasks / steps | No | No |
| registries / connectedRegistries | No | No |
| registries / connectedRegistries / deactivate | No | No |
| registries / eventGridFilters | No | No |
| registries / exportPipelines | No | No |
| registries / generateCredentials | No | No |
| registries / getBuildSourceUploadUrl | No | No |
| registries / GetCredentials | No | No |
| registries / importImage | No | No |
| registries / importPipelines | No | No |
| registries / pipelineRuns | No | No |
| registries / privateEndpointConnectionProxies | No | No |
| registries / privateEndpointConnectionProxies / validate | No | No |
| registries / privateEndpointConnections | No | No |
| registries / privateLinkResources | No | No |
| registries / queueBuild | No | No |
| registries / regenerateCredential | No | No |
| registries / regenerateCredentials | No | No |
| registries / replications | Yes | Yes |
| registries / runs | No | No |
| registries / runs / cancel | No | No |
| registries / scheduleRun | No | No |
| registries / scopeMaps | No | No |
| registries / taskRuns | No | No |
| registries / tasks | Yes | Yes |
| registries / tokens | No | No |
| registries / updatePolicies | No | No |
| registries / webhooks | Yes | Yes |
| registries / webhooks / getCallbackConfig | No | No |
| registries / webhooks / ping | No | No |
Microsoft.ContainerService
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| containerServices | Yes | Yes |
| fleetMemberships | No | No |
| fleets | Yes | Yes |
| fleets / members | No | No |
| managedClusters | Yes | Yes |
| ManagedClusters / eventGridFilters | No | No |
| managedclustersnapshots | Yes | Yes |
| snapshots | Yes | Yes |
Microsoft.DataBox
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| jobs | Yes | Yes |
| jobs / eventGridFilters | No | No |
Microsoft.Databricks
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| accessConnectors | Yes | Yes |
| workspaces | Yes | Yes |
| workspaces / dbWorkspaces | No | No |
| workspaces / virtualNetworkPeerings | No | No |
Microsoft.DataFactory
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| dataFactories | Yes | Yes |
| dataFactories / diagnosticSettings | No | No |
| dataFactories / metricDefinitions | No | No |
| dataFactorySchema | No | No |
| factories | Yes | Yes |
| factories / integrationRuntimes | No | No |
| factories / pipelines | No | No |
Note
If you have Azure-SSIS integration runtimes in your data factory, their running cost will be tagged with data factory tags. Running Azure-SSIS integration runtimes must be stopped and restarted for new data factory tags to be applied to their running cost.
Microsoft.DataMigration
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| DatabaseMigrations | No | No |
| services | Yes | Yes |
| services / projects | Yes | Yes |
| slots | Yes | Yes |
| SqlMigrationServices | Yes | Yes |
Microsoft.DBforMariaDB
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| servers | Yes | Yes |
| servers / advisors | No | No |
| servers / keys | No | No |
| servers / privateEndpointConnectionProxies | No | No |
| servers / privateEndpointConnections | No | No |
| servers / privateLinkResources | No | No |
| servers / queryTexts | No | No |
| servers / recoverableServers | No | No |
| servers / resetQueryPerformanceInsightData | No | No |
| servers / topQueryStatistics | No | No |
| servers / virtualNetworkRules | No | No |
| servers / waitStatistics | No | No |
Microsoft.DBforMySQL
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| assessForMigration | No | No |
| flexibleServers | Yes | Yes |
| getPrivateDnsZoneSuffix | No | No |
| servers | Yes | Yes |
| servers / advisors | No | No |
| servers / keys | No | No |
| servers / privateEndpointConnectionProxies | No | No |
| servers / privateEndpointConnections | No | No |
| servers / privateLinkResources | No | No |
| servers / queryTexts | No | No |
| servers / recoverableServers | No | No |
| servers / resetQueryPerformanceInsightData | No | No |
| servers / topQueryStatistics | No | No |
| servers / virtualNetworkRules | No | No |
| servers / waitStatistics | No | No |
Microsoft.DBforPostgreSQL
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| flexibleServers | Yes | Yes |
| getPrivateDnsZoneSuffix | No | No |
| serverGroups | Yes | Yes |
| serverGroupsv2 | Yes | No |
| servers | Yes | Yes |
| servers / advisors | No | No |
| servers / keys | No | No |
| servers / privateEndpointConnectionProxies | No | No |
| servers / privateEndpointConnections | No | No |
| servers / privateLinkResources | No | No |
| servers / queryTexts | No | No |
| servers / recoverableServers | No | No |
| servers / resetQueryPerformanceInsightData | No | No |
| servers / topQueryStatistics | No | No |
| servers / virtualNetworkRules | No | No |
| servers / waitStatistics | No | No |
| serversv2 | Yes | No |
Microsoft.DesktopVirtualization
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| applicationgroups | Yes | Yes |
| applicationgroups / applications | No | No |
| applicationgroups / desktops | No | No |
| applicationgroups / startmenuitems | No | No |
| hostpools | Yes | Yes |
| hostpools / msixpackages | No | No |
| hostpools / sessionhosts | No | No |
| hostpools / sessionhosts / usersessions | No | No |
| hostpools / usersessions | No | No |
| scalingplans | Yes | Yes |
| workspaces | Yes | Yes |
Microsoft.DevAI
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| instances | Yes | Yes |
| instances / experiments | Yes | Yes |
| instances / sandboxes | Yes | Yes |
| instances / sandboxes / experiments | Yes | Yes |
Microsoft.Devices
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| IotHubs | Yes | Yes |
| IotHubs / eventGridFilters | No | No |
| IotHubs / failover | No | No |
| IotHubs / securitySettings | No | No |
| ProvisioningServices | Yes | Yes |
| usages | No | No |
Microsoft.DocumentDB
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| cassandraClusters | Yes | Yes |
| databaseAccountNames | No | No |
| databaseAccounts | Yes | Yes |
| databaseAccounts / encryptionScopes | No | No |
| restorableDatabaseAccounts | No | No |
Microsoft.Elastic
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| monitors | Yes | Yes |
| monitors / tagRules | No | No |
Microsoft.EventGrid
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| domains | Yes | Yes |
| domains / topics | No | No |
| eventSubscriptions | No | No |
| extensionTopics | No | No |
| namespaces | Yes | Yes |
| partnerConfigurations | Yes | Yes |
| partnerDestinations | Yes | Yes |
| partnerNamespaces | Yes | Yes |
| partnerNamespaces / channels | No | No |
| partnerNamespaces / eventChannels | No | No |
| partnerRegistrations | Yes | Yes |
| partnerTopics | Yes | Yes |
| partnerTopics / eventSubscriptions | No | No |
| systemTopics | Yes | Yes |
| systemTopics / eventSubscriptions | No | No |
| topics | Yes | Yes |
| topicTypes | No | No |
| verifiedPartners | No | No |
Microsoft.EventHub
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| clusters | Yes | Yes |
| namespaces | Yes | Yes |
| namespaces / applicationGroups | No | No |
| namespaces / authorizationrules | No | No |
| namespaces / disasterrecoveryconfigs | No | No |
| namespaces / eventhubs | No | No |
| namespaces / eventhubs / authorizationrules | No | No |
| namespaces / eventhubs / consumergroups | No | No |
| namespaces / networkrulesets | No | No |
| namespaces / privateEndpointConnections | No | No |
Microsoft.Features
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| featureConfigurations | No | No |
| featureProviderNamespaces | No | No |
| featureProviders | No | No |
| features | No | No |
| providers | No | No |
| subscriptionFeatureRegistrations | No | No |
Microsoft.GuestConfiguration
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| guestConfigurationAssignments | No | No |
Microsoft.HDInsight
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| clusterPools | Yes | Yes |
| clusterPools / clusters | Yes | Yes |
| clusterPools / clusters / instanceViews | No | No |
| clusterPools / clusters / serviceConfigs | No | No |
| clusterPools / clusters / sessionClusters | Yes | Yes |
| clusterPools / clusters / sessionClusters / instanceViews | No | No |
| clusterPools / clusters / sessionClusters / serviceConfigs | No | No |
| clusters | Yes | Yes |
| clusters / applications | No | No |
Microsoft.ImportExport
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| jobs | Yes | Yes |
microsoft.insights
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| actiongroups | Yes | Yes |
| actiongroups / networkSecurityPerimeterAssociationProxies | No | No |
| actiongroups / networkSecurityPerimeterConfigurations | No | No |
| activityLogAlerts | Yes | Yes |
| alertrules | Yes | Yes |
| autoscalesettings | Yes | Yes |
| components | Yes | Yes |
| components / aggregate | No | No |
| components / analyticsItems | No | No |
| components / annotations | No | No |
| components / api | No | No |
| components / apiKeys | No | No |
| components / currentBillingFeatures | No | No |
| components / defaultWorkItemConfig | No | No |
| components / events | No | No |
| components / exportConfiguration | No | No |
| components / extendQueries | No | No |
| components / favorites | No | No |
| components / featureCapabilities | No | No |
| components / generateDiagnosticServiceReadOnlyToken | No | No |
| components / generateDiagnosticServiceReadWriteToken | No | No |
| components / linkedstorageaccounts | No | No |
| components / metadata | No | No |
| components / metricDefinitions | No | No |
| components / metrics | No | No |
| components / move | No | No |
| components / myAnalyticsItems | No | No |
| components / myFavorites | No | No |
| components / pricingPlans | No | No |
| components / proactiveDetectionConfigs | No | No |
| components / purge | No | No |
| components / query | No | No |
| components / quotaStatus | No | No |
| components / webtests | No | No |
| components / workItemConfigs | No | No |
| createnotifications | No | No |
| dataCollectionEndpoints | Yes | Yes |
| dataCollectionEndpoints / networkSecurityPerimeterAssociationProxies | No | No |
| dataCollectionEndpoints / networkSecurityPerimeterConfigurations | No | No |
| dataCollectionEndpoints / scopedPrivateLinkProxies | No | No |
| dataCollectionRuleAssociations | No | No |
| dataCollectionRules | Yes | Yes |
| diagnosticSettings | No | No |
| diagnosticSettingsCategories | No | No |
| eventCategories | No | No |
| eventtypes | No | No |
| extendedDiagnosticSettings | No | No |
| generateDiagnosticServiceReadOnlyToken | No | No |
| generateDiagnosticServiceReadWriteToken | No | No |
| guestDiagnosticSettings | Yes | Yes |
| guestDiagnosticSettingsAssociation | No | No |
| logDefinitions | No | No |
| logprofiles | No | No |
| logs | No | No |
| metricalerts | Yes | Yes |
| metricbaselines | No | No |
| metricbatch | No | No |
| metricDefinitions | No | No |
| metricNamespaces | No | No |
| metrics | No | No |
| migratealertrules | No | No |
| migrateToNewPricingModel | No | No |
| monitoredObjects | No | No |
| myWorkbooks | No | No |
| notificationgroups | Yes | Yes |
| notificationstatus | No | No |
| privateLinkScopes | Yes | Yes |
| privateLinkScopes / privateEndpointConnectionProxies | No | No |
| privateLinkScopes / privateEndpointConnections | No | No |
| privateLinkScopes / scopedResources | No | No |
| rollbackToLegacyPricingModel | No | No |
| scheduledqueryrules | Yes | Yes |
| scheduledqueryrules / networkSecurityPerimeterAssociationProxies | No | No |
| scheduledqueryrules / networkSecurityPerimeterConfigurations | No | No |
| topology | No | No |
| transactions | No | No |
| webtests | Yes | Yes |
| webtests / getTestResultFile | No | No |
| workbooks | Yes | Yes |
| workbooktemplates | Yes | Yes |
Microsoft.IoTCentral
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| appTemplates | No | No |
| IoTApps | Yes | Yes |
Microsoft.IoTSecurity
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| alertTypes | No | No |
| defenderSettings | No | No |
| onPremiseSensors | No | No |
| recommendationTypes | No | No |
| sensors | No | No |
| sites | No | No |
Microsoft.KeyVault
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| deletedManagedHSMs | No | No |
| deletedVaults | No | No |
| hsmPools | Yes | Yes |
| managedHSMs | Yes | Yes |
| vaults | Yes | Yes |
| vaults / accessPolicies | No | No |
| vaults / eventGridFilters | No | No |
| vaults / keys | No | No |
| vaults / keys / versions | No | No |
| vaults / secrets | Yes | No |
Microsoft.Kubernetes
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| connectedClusters | Yes | Yes |
| registeredSubscriptions | No | No |
Microsoft.Kusto
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| clusters | Yes | Yes |
| clusters / attacheddatabaseconfigurations | No | No |
| clusters / databases | No | No |
| clusters / databases / dataconnections | No | No |
| clusters / databases / eventhubconnections | No | No |
| clusters / databases / principalassignments | No | No |
| clusters / databases / scripts | No | No |
| clusters / dataconnections | No | No |
| clusters / principalassignments | No | No |
| clusters / sharedidentities | No | No |
Microsoft.Logic
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| hostingEnvironments | Yes | Yes |
| integrationAccounts | Yes | Yes |
| integrationServiceEnvironments | Yes | Yes |
| integrationServiceEnvironments / managedApis | Yes | Yes |
| isolatedEnvironments | Yes | Yes |
| workflows | Yes | Yes |
Microsoft.MachineLearningServices
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| aisysteminventories | Yes | Yes |
| registries | Yes | Yes |
| registries / codes | No | No |
| registries / codes / versions | No | No |
| registries / components | No | No |
| registries / components / versions | No | No |
| registries / environments | No | No |
| registries / environments / versions | No | No |
| registries / models | No | No |
| registries / models / versions | No | No |
| virtualclusters | Yes | Yes |
| workspaces | Yes | Yes |
| workspaces / batchEndpoints | Yes | No |
| workspaces / batchEndpoints / deployments | Yes | Yes |
| workspaces / batchEndpoints / deployments / jobs | No | No |
| workspaces / batchEndpoints / jobs | No | No |
| workspaces / codes | No | No |
| workspaces / codes / versions | No | No |
| workspaces / components | No | No |
| workspaces / components / versions | No | No |
| workspaces / computes | No | No |
| workspaces / data | No | No |
| workspaces / data / versions | No | No |
| workspaces / datasets | No | No |
| workspaces / datastores | No | No |
| workspaces / environments | No | No |
| workspaces / environments / versions | No | No |
| workspaces / eventGridFilters | No | No |
| workspaces / jobs | No | No |
| workspaces / labelingJobs | No | No |
| workspaces / linkedServices | No | No |
| workspaces / models | No | No |
| workspaces / models / versions | No | No |
| workspaces / onlineEndpoints | Yes | Yes |
| workspaces / onlineEndpoints / deployments | Yes | Yes |
| workspaces / schedules | No | No |
| workspaces / services | No | No |
Note
Workspace tags don't propagate to compute clusters and compute instances. It is not supported with tracking cost at cluster/batch endpoint level.
Microsoft.Maintenance
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| applyUpdates | No | No |
| configurationAssignments | No | No |
| maintenanceConfigurations | Yes | Yes |
| publicMaintenanceConfigurations | No | No |
| updates | No | No |
Microsoft.ManagedIdentity
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| Identities | No | No |
| userAssignedIdentities | Yes | Yes |
| userAssignedIdentities / federatedIdentityCredentials | No | No |
Microsoft.ManagedServices
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| marketplaceRegistrationDefinitions | No | No |
| registrationAssignments | No | No |
| registrationDefinitions | No | No |
Microsoft.Management
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| getEntities | No | No |
| managementGroups | No | No |
| managementGroups / settings | No | No |
| resources | No | No |
| startTenantBackfill | No | No |
| tenantBackfillStatus | No | No |
Microsoft.Media
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| mediaservices | Yes | Yes |
| mediaservices / accountFilters | No | No |
| mediaservices / assets | No | No |
| mediaservices / assets / assetFilters | No | No |
| mediaservices / assets / tracks | No | No |
| mediaservices / contentKeyPolicies | No | No |
| mediaservices / eventGridFilters | No | No |
| mediaservices / graphInstances | No | No |
| mediaservices / graphTopologies | No | No |
| mediaservices / liveEvents | Yes | Yes |
| mediaservices / liveEvents / liveOutputs | No | No |
| mediaservices / mediaGraphs | No | No |
| mediaservices / privateEndpointConnectionProxies | No | No |
| mediaservices / privateEndpointConnections | No | No |
| mediaservices / streamingEndpoints | Yes | Yes |
| mediaservices / streamingLocators | No | No |
| mediaservices / streamingPolicies | No | No |
| mediaservices / transforms | No | No |
| mediaservices / transforms / jobs | No | No |
| videoAnalyzers | Yes | Yes |
| videoAnalyzers / accessPolicies | No | No |
| videoAnalyzers / edgeModules | No | No |
| videoAnalyzers / livePipelines | No | No |
| videoAnalyzers / pipelineJobs | No | No |
| videoAnalyzers / pipelineTopologies | No | No |
| videoAnalyzers / videos | No | No |
Microsoft.Migrate
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| assessmentProjects | Yes | Yes |
| migrateprojects | Yes | Yes |
| modernizeProjects | Yes | Yes |
| moveCollections | Yes | Yes |
| projects | Yes | Yes |
Microsoft.Network
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| applicationGateways | Yes | Yes |
| applicationGatewayWebApplicationFirewallPolicies | Yes | Yes |
| applicationSecurityGroups | Yes | Yes |
| azureFirewallFqdnTags | No | No |
| azureFirewalls | Yes | No |
| azureWebCategories | No | No |
| bastionHosts | Yes | Yes |
| bgpServiceCommunities | No | No |
| cloudServiceSlots | No | No |
| connections | Yes | Yes |
| customIpPrefixes | Yes | Yes |
| ddosCustomPolicies | Yes | Yes |
| ddosProtectionPlans | Yes | Yes |
| dnsForwardingRulesets | Yes | Yes |
| dnsForwardingRulesets / forwardingRules | No | No |
| dnsForwardingRulesets / virtualNetworkLinks | No | No |
| dnsResolvers | Yes | Yes |
| dnsResolvers / inboundEndpoints | Yes | Yes |
| dnsResolvers / outboundEndpoints | Yes | Yes |
| dnszones | Yes | Yes |
| dnszones / A | No | No |
| dnszones / AAAA | No | No |
| dnszones / all | No | No |
| dnszones / CAA | No | No |
| dnszones / CNAME | No | No |
| dnszones / MX | No | No |
| dnszones / NS | No | No |
| dnszones / PTR | No | No |
| dnszones / recordsets | No | No |
| dnszones / SOA | No | No |
| dnszones / SRV | No | No |
| dnszones / TXT | No | No |
| dscpConfigurations | Yes | Yes |
| expressRouteCircuits | Yes | Yes |
| expressRouteCrossConnections | Yes | Yes |
| expressRouteGateways | Yes | Yes |
| expressRoutePorts | Yes | Yes |
| expressRouteProviderPorts | No | No |
| expressRouteServiceProviders | No | No |
| firewallPolicies | Yes, see note below | Yes |
| firewallPolicies / ruleCollectionGroups | No | No |
| frontdoors | Yes, but limited (see note below) | Yes |
| frontdoors / frontendEndpoints | Yes, but limited (see note below) | No |
| frontdoors / frontendEndpoints / customHttpsConfiguration | Yes, but limited (see note below) | No |
| frontdoorWebApplicationFirewallManagedRuleSets | Yes, but limited (see note below) | No |
| frontdoorWebApplicationFirewallPolicies | Yes, but limited (see note below) | Yes |
| getDnsResourceReference | No | No |
| internalNotify | No | No |
| internalPublicIpAddresses | No | No |
| ipGroups | Yes | Yes |
| loadBalancers | Yes | Yes |
| loadBalancers / backendAddressPools | No | No |
| localNetworkGateways | Yes | Yes |
| natGateways | Yes | Yes |
| networkExperimentProfiles | Yes | Yes |
| networkIntentPolicies | Yes | Yes |
| networkInterfaces | Yes | Yes |
| networkManagerConnections | No | No |
| networkManagers | Yes | Yes |
| networkProfiles | Yes | Yes |
| networkSecurityGroups | Yes | Yes |
| networkSecurityGroups / securityRules | No | No |
| networkSecurityPerimeters | Yes | Yes |
| networkVirtualAppliances | Yes | Yes |
| networkWatchers | Yes | Yes |
| networkWatchers / connectionMonitors | Yes | No |
| networkWatchers / flowLogs | Yes | No |
| networkWatchers / lenses | Yes | No |
| networkWatchers / pingMeshes | Yes | No |
| p2sVpnGateways | Yes | Yes |
| privateDnsZones | Yes | Yes |
| privateDnsZones / A | No | No |
| privateDnsZones / AAAA | No | No |
| privateDnsZones / all | No | No |
| privateDnsZones / CNAME | No | No |
| privateDnsZones / MX | No | No |
| privateDnsZones / PTR | No | No |
| privateDnsZones / SOA | No | No |
| privateDnsZones / SRV | No | No |
| privateDnsZones / TXT | No | No |
| privateDnsZones / virtualNetworkLinks | Yes | Yes |
| privateDnsZonesInternal | No | No |
| privateEndpointRedirectMaps | Yes | Yes |
| privateEndpoints | Yes | Yes |
| privateEndpoints / privateLinkServiceProxies | No | No |
| privateLinkServices | Yes | Yes |
| publicIPAddresses | Yes | Yes |
| publicIPPrefixes | Yes | Yes |
| routeFilters | Yes | Yes |
| routeTables | Yes | Yes |
| routeTables / routes | No | No |
| securityPartnerProviders | Yes | Yes |
| serviceEndpointPolicies | Yes | Yes |
| trafficManagerGeographicHierarchies | No | No |
| trafficmanagerprofiles | Yes, see note below | Yes |
| trafficmanagerprofiles / azureendpoints | No | No |
| trafficmanagerprofiles / externalendpoints | No | No |
| trafficmanagerprofiles / heatMaps | No | No |
| trafficmanagerprofiles / nestedendpoints | No | No |
| trafficManagerUserMetricsKeys | No | No |
| virtualHubs | Yes | Yes |
| virtualNetworkGateways | Yes | Yes |
| virtualNetworks | Yes | Yes |
| virtualNetworks / privateDnsZoneLinks | No | No |
| virtualNetworks / subnets | No | No |
| virtualNetworks / taggedTrafficConsumers | No | No |
| virtualNetworkTaps | Yes | Yes |
| virtualRouters | Yes | Yes |
| virtualWans | Yes | Yes |
| vpnGateways | Yes | Yes |
| vpnServerConfigurations | Yes | Yes |
| vpnSites | Yes | Yes |
Microsoft.NetworkCloud
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| bareMetalMachines | Yes | Yes |
| cloudServicesNetworks | Yes | Yes |
| clusterManagers | Yes | Yes |
| clusters | Yes | Yes |
| clusters / admissions | No | No |
| defaultCniNetworks | Yes | Yes |
| disks | Yes | Yes |
| hybridAksClusters | Yes | Yes |
| hybridAksManagementDomains | Yes | Yes |
| hybridAksVirtualMachines | Yes | Yes |
| l2Networks | Yes | Yes |
| l3Networks | Yes | Yes |
| rackManifests | Yes | Yes |
| racks | Yes | Yes |
| storageAppliances | Yes | Yes |
| trunkedNetworks | Yes | Yes |
| virtualMachines | Yes | Yes |
| workloadNetworks | Yes | Yes |
Microsoft.NotificationHubs
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| namespaces | Yes | No |
| namespaces / notificationHubs | Yes | No |
Microsoft.OpenLogisticsPlatform
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| applicationManagers | Yes | Yes |
| applicationManagers / applicationRegistrations | No | No |
| applicationManagers / eventGridFilters | No | No |
| applicationRegistrationInvites | No | No |
| applicationWorkspaces | Yes | Yes |
| applicationWorkspaces / applications | No | No |
| applicationWorkspaces / applications / applicationRegistrationInvites | No | No |
| shareInvites | No | No |
| workspaces | Yes | Yes |
| workspaces / applicationRegistrations | No | No |
| workspaces / applications | No | No |
| workspaces / eventGridFilters | No | No |
| workspaces / shares | No | No |
| workspaces / shareSubscriptions | No | No |
Microsoft.OperationalInsights
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| clusters | Yes | Yes |
| deletedWorkspaces | No | No |
| linkTargets | No | No |
| querypacks | Yes | Yes |
| storageInsightConfigs | No | No |
| workspaces | Yes | Yes |
| workspaces / dataExports | No | No |
| workspaces / dataSources | No | No |
| workspaces / linkedServices | No | No |
| workspaces / linkedStorageAccounts | No | No |
| workspaces / metadata | No | No |
| workspaces / networkSecurityPerimeterAssociationProxies | No | No |
| workspaces / networkSecurityPerimeterConfigurations | No | No |
| workspaces / query | No | No |
| workspaces / scopedPrivateLinkProxies | No | No |
| workspaces / storageInsightConfigs | No | No |
| workspaces / tables | No | No |
Microsoft.Orbital
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| contactProfiles | Yes | Yes |
| edgeSites | Yes | Yes |
| globalCommunicationsSites | No | No |
| groundStations | Yes | Yes |
| l2Connections | Yes | Yes |
| l3Connections | Yes | Yes |
| orbitalGateways | Yes | Yes |
| spacecrafts | Yes | Yes |
| spacecrafts / contacts | No | No |
Microsoft.PolicyInsights
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| attestations | No | No |
| componentPolicyStates | No | No |
| eventGridFilters | No | No |
| policyEvents | No | No |
| policyMetadata | No | No |
| policyStates | No | No |
| policyTrackedResources | No | No |
| remediations | No | No |
Microsoft.Portal
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| consoles | No | No |
| dashboards | Yes | Yes |
| tenantconfigurations | No | No |
| userSettings | No | No |
Microsoft.PowerBI
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| privateLinkServicesForPowerBI | Yes | Yes |
| tenants | Yes | Yes |
| tenants / workspaces | No | No |
| workspaceCollections | Yes | Yes |
Microsoft.PowerBIDedicated
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| autoScaleVCores | Yes | Yes |
| capacities | Yes | Yes |
| servers | Yes | Yes |
Microsoft.ProviderHub
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| providerRegistrations | No | No |
| providerRegistrations / customRollouts | No | No |
| providerRegistrations / defaultRollouts | No | No |
| providerRegistrations / resourceActions | No | No |
| providerRegistrations / resourceTypeRegistrations | No | No |
Microsoft.RecoveryServices
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| backupProtectedItems | No | No |
| vaults | Yes | Yes |
| vaults / backupPolicies | Yes | Yes |
Microsoft.Relay
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| namespaces | Yes | Yes |
| namespaces / authorizationrules | No | No |
| namespaces / hybridconnections | No | No |
| namespaces / hybridconnections / authorizationrules | No | No |
| namespaces / privateEndpointConnections | No | No |
| namespaces / wcfrelays | No | No |
| namespaces / wcfrelays / authorizationrules | No | No |
Microsoft.ResourceGraph
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| queries | Yes | Yes |
| resourceChangeDetails | No | No |
| resourceChanges | No | No |
| resources | No | No |
| resourcesHistory | No | No |
| subscriptionsStatus | No | No |
Microsoft.ResourceHealth
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| childResources | No | No |
| emergingissues | No | No |
| events | No | No |
| impactedResources | No | No |
| metadata | No | No |
Microsoft.Resources
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| deployments | Yes | No |
| deploymentScripts | Yes | Yes |
| deploymentScripts / logs | No | No |
| deploymentStacks / snapshots | No | No |
| links | No | No |
| resourceGroups | Yes | No |
| snapshots | No | No |
| subscriptions | Yes | No |
| tags | No | No |
| templateSpecs | Yes | Yes |
| templateSpecs / versions | Yes | Yes |
| tenants | No | No |
| validateResources | No | No |
Microsoft.Search
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| resourceHealthMetadata | No | No |
| searchServices | Yes | Yes |
Microsoft.Security
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| adaptiveNetworkHardenings | No | No |
| advancedThreatProtectionSettings | No | No |
| alerts | No | No |
| alertsSuppressionRules | No | No |
| allowedConnections | No | No |
| antiMalwareSettings | No | No |
| applications | No | No |
| assessmentMetadata | No | No |
| assessments | No | No |
| assessments / governanceAssignments | No | No |
| assignments | Yes | Yes |
| attackPaths | No | No |
| autoDismissAlertsRules | No | No |
| automations | Yes | Yes |
| AutoProvisioningSettings | No | No |
| Compliances | No | No |
| connectedContainerRegistries | No | No |
| connectors | No | No |
| customAssessmentAutomations | Yes | Yes |
| customEntityStoreAssignments | Yes | Yes |
| dataCollectionAgents | No | No |
| dataScanners | Yes | Yes |
| dataSensitivitySettings | No | No |
| deviceSecurityGroups | No | No |
| discoveredSecuritySolutions | No | No |
| externalSecuritySolutions | No | No |
| governanceRules | No | No |
| InformationProtectionPolicies | No | No |
| ingestionSettings | No | No |
| insights | No | No |
| iotSecuritySolutions | Yes | Yes |
| iotSecuritySolutions / analyticsModels | No | No |
| iotSecuritySolutions / analyticsModels / aggregatedAlerts | No | No |
| iotSecuritySolutions / analyticsModels / aggregatedRecommendations | No | No |
| iotSecuritySolutions / iotAlerts | No | No |
| iotSecuritySolutions / iotAlertTypes | No | No |
| iotSecuritySolutions / iotRecommendations | No | No |
| iotSecuritySolutions / iotRecommendationTypes | No | No |
| jitNetworkAccessPolicies | No | No |
| jitPolicies | No | No |
| MdeOnboardings | No | No |
| policies | No | No |
| pricings | No | No |
| query | No | No |
| regulatoryComplianceStandards | No | No |
| regulatoryComplianceStandards / regulatoryComplianceControls | No | No |
| regulatoryComplianceStandards / regulatoryComplianceControls / regulatoryComplianceAssessments | No | No |
| secureScoreControlDefinitions | No | No |
| secureScoreControls | No | No |
| secureScores | No | No |
| secureScores / secureScoreControls | No | No |
| securityConnectors | Yes | Yes |
| securityContacts | No | No |
| securitySolutions | No | No |
| securitySolutionsReferenceData | No | No |
| securityStatuses | No | No |
| securityStatusesSummaries | No | No |
| serverVulnerabilityAssessments | No | No |
| serverVulnerabilityAssessmentsSettings | No | No |
| settings | No | No |
| sqlVulnerabilityAssessments | No | No |
| standards | Yes | Yes |
| subAssessments | No | No |
| tasks | No | No |
| topologies | No | No |
| vmScanners | No | No |
| workspaceSettings | No | No |
Microsoft.SecurityInsights
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| aggregations | No | No |
| alertRules | No | No |
| alertRuleTemplates | No | No |
| automationRules | No | No |
| bookmarks | No | No |
| cases | No | No |
| contentPackages | No | No |
| contentTemplates | No | No |
| dataConnectorDefinitions | No | No |
| dataConnectors | No | No |
| enrichment | No | No |
| entities | No | No |
| entityQueryTemplates | No | No |
| fileImports | No | No |
| huntsessions | No | No |
| incidents | No | No |
| metadata | No | No |
| MitreCoverageRecords | No | No |
| onboardingStates | No | No |
| overview | No | No |
| recommendations | No | No |
| securityMLAnalyticsSettings | No | No |
| settings | No | No |
| sourceControls | No | No |
| threatIntelligence | No | No |
Microsoft.ServiceBus
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| namespaces | Yes | Yes |
| namespaces / authorizationrules | No | No |
| namespaces / disasterrecoveryconfigs | No | No |
| namespaces / eventgridfilters | No | No |
| namespaces / networkrulesets | No | No |
| namespaces / privateEndpointConnections | No | No |
| namespaces / queues | No | No |
| namespaces / queues / authorizationrules | No | No |
| namespaces / topics | No | No |
| namespaces / topics / authorizationrules | No | No |
| namespaces / topics / subscriptions | No | No |
| namespaces / topics / subscriptions / rules | No | No |
| premiumMessagingRegions | No | No |
Microsoft.ServiceFabric
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| clusters | Yes | Yes |
| clusters / applications | No | No |
| clusters / applications / services | No | No |
| clusters / applicationTypes | No | No |
| clusters / applicationTypes / versions | No | No |
| edgeclusters | Yes | Yes |
| edgeclusters / applications | No | No |
| managedclusters | Yes | Yes |
| managedclusters / applications | No | No |
| managedclusters / applications / services | No | No |
| managedclusters / applicationTypes | No | No |
| managedclusters / applicationTypes / versions | No | No |
| managedclusters / nodetypes | No | No |
Microsoft.SignalRService
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| SignalR | Yes | Yes |
| SignalR / eventGridFilters | No | No |
| WebPubSub | Yes | Yes |
Microsoft.Solutions
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| applicationDefinitions | Yes | Yes |
| applications | Yes | Yes |
| jitRequests | Yes | Yes |
Microsoft.Sql
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| instancePools | Yes | Yes |
| managedInstances | Yes | Yes |
| managedInstances / administrators | No | No |
| managedInstances / advancedThreatProtectionSettings | No | No |
| managedInstances / databases | Yes | No |
| managedInstances / databases / advancedThreatProtectionSettings | No | No |
| managedInstances / databases / backupLongTermRetentionPolicies | No | No |
| managedInstances / databases / LongTermRetentionBackups | No | No |
| managedInstances / databases / vulnerabilityAssessments | No | No |
| managedInstances / dnsAliases | No | No |
| managedInstances / metricDefinitions | No | No |
| managedInstances / metrics | No | No |
| managedInstances / recoverableDatabases | No | No |
| managedInstances / sqlAgent | No | No |
| managedInstances / startStopSchedules | No | No |
| managedInstances / tdeCertificates | No | No |
| managedInstances / vulnerabilityAssessments | No | No |
| servers | Yes | Yes |
| servers / administrators | No | No |
| servers / advancedThreatProtectionSettings | No | No |
| servers / advisors | No | No |
| servers / aggregatedDatabaseMetrics | No | No |
| servers / auditingSettings | No | No |
| servers / automaticTuning | No | No |
| servers / communicationLinks | No | No |
| servers / connectionPolicies | No | No |
| servers / databases | Yes | Yes |
| servers / databases / activate | No | No |
| servers / databases / activatedatabase | No | No |
| servers / databases / advancedThreatProtectionSettings | No | No |
| servers / databases / advisors | No | No |
| servers / databases / auditingSettings | No | No |
| servers / databases / auditRecords | No | No |
| servers / databases / automaticTuning | No | No |
| servers / databases / backupLongTermRetentionPolicies | No | No |
| servers / databases / LongTermRetentionBackups | No | No |
| servers / databases / backupShortTermRetentionPolicies | No | No |
| servers / databases / databaseState | No | No |
| servers / databases / dataMaskingPolicies | No | No |
| servers / databases / dataMaskingPolicies / rules | No | No |
| servers / databases / deactivate | No | No |
| servers / databases / deactivatedatabase | No | No |
| servers / databases / extensions | No | No |
| servers / databases / geoBackupPolicies | No | No |
| servers / databases / ledgerDigestUploads | No | No |
| servers / databases / metricDefinitions | No | No |
| servers / databases / metrics | No | No |
| servers / databases / recommendedSensitivityLabels | No | No |
| servers / databases / securityAlertPolicies | No | No |
| servers / databases / sqlvulnerabilityassessments | No | No |
| servers / databases / syncGroups | No | No |
| servers / databases / syncGroups / syncMembers | No | No |
| servers / databases / topQueries | No | No |
| servers / databases / topQueries / queryText | No | No |
| servers / databases / transparentDataEncryption | No | No |
| servers / databases / VulnerabilityAssessment | No | No |
| servers / databases / vulnerabilityAssessments | No | No |
| servers / databases / VulnerabilityAssessmentScans | No | No |
| servers / databases / VulnerabilityAssessmentSettings | No | No |
| servers / databases / workloadGroups | No | No |
| servers / databaseSecurityPolicies | No | No |
| servers / devOpsAuditingSettings | No | No |
| servers / disasterRecoveryConfiguration | No | No |
| servers / dnsAliases | No | No |
| servers / elasticPoolEstimates | No | No |
| servers / elasticpools | Yes | Yes |
| servers / elasticPools / advisors | No | No |
| servers / elasticpools / metricdefinitions | No | No |
| servers / elasticpools / metrics | No | No |
| servers / encryptionProtector | No | No |
| servers / extendedAuditingSettings | No | No |
| servers / failoverGroups | No | No |
| servers / import | No | No |
| servers / jobAccounts | Yes | Yes |
| servers / jobAgents | Yes | Yes |
| servers / jobAgents / jobs | No | No |
| servers / jobAgents / jobs / executions | No | No |
| servers / jobAgents / jobs / steps | No | No |
| servers / keys | No | No |
| servers / recommendedElasticPools | No | No |
| servers / recoverableDatabases | No | No |
| servers / restorableDroppedDatabases | No | No |
| servers / securityAlertPolicies | No | No |
| servers / serviceObjectives | No | No |
| servers / sqlvulnerabilityassessments | No | No |
| servers / syncAgents | No | No |
| servers / tdeCertificates | No | No |
| servers / usages | No | No |
| servers / virtualNetworkRules | No | No |
| servers / vulnerabilityAssessments | No | No |
| virtualClusters | Yes | No |
Note
The Master database doesn't support tags, but other databases, including Azure Synapse Analytics databases, support tags. Azure Synapse Analytics databases must be in Active (not Paused) state.
Note
Only Virtual Clusters with version 2.0 support tags. Minimal required API version for configuring tags is 2022-05-01.
Microsoft.SqlVirtualMachine
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| SqlVirtualMachineGroups | Yes | Yes |
| SqlVirtualMachines | Yes | Yes |
Microsoft.Storage
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| dataMovers | Yes | Yes |
| dataMovers / agents | No | No |
| dataMovers / endpoints | No | No |
| dataMovers / projects | No | No |
| dataMovers / projects / jobDefinitions | No | No |
| dataMovers / projects / jobDefinitions / jobRuns | No | No |
| deletedAccounts | No | No |
| storageAccounts | Yes | Yes |
| storageAccounts / blobServices | No | No |
| storageAccounts / encryptionScopes | No | No |
| storageAccounts / fileServices | No | No |
| storageAccounts / queueServices | No | No |
| storageAccounts / services | No | No |
| storageAccounts / services / metricDefinitions | No | No |
| storageAccounts / storageTaskAssignments | No | No |
| storageAccounts / tableServices | No | No |
| storageTasks | Yes | Yes |
| usages | No | No |
Microsoft.StorageCache
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| amlFilesystems | Yes | Yes |
| caches | Yes | Yes |
| caches / storageTargets | No | No |
| usageModels | No | No |
Microsoft.StorageSync
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| storageSyncServices | Yes | Yes |
| storageSyncServices / registeredServers | No | No |
| storageSyncServices / syncGroups | No | No |
| storageSyncServices / syncGroups / cloudEndpoints | No | No |
| storageSyncServices / syncGroups / serverEndpoints | No | No |
| storageSyncServices / workflows | No | No |
Microsoft.StreamAnalytics
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| clusters | Yes | Yes |
| clusters / privateEndpoints | No | No |
| streamingjobs | Yes | Yes |
Note
You can't add a tag when streamingjobs is running. Stop the resource to add a tag.
Microsoft.Subscription
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| acceptChangeTenant | No | No |
| acceptOwnership | No | No |
| acceptOwnershipStatus | No | No |
| aliases | No | No |
| cancel | No | No |
| changeTenantRequest | No | No |
| changeTenantStatus | No | No |
| enable | No | No |
| policies | No | No |
| rename | No | No |
| SubscriptionDefinitions | No | No |
| subscriptions | No | No |
Microsoft.Synapse
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| privateLinkHubs | Yes | Yes |
| workspaces | Yes | Yes |
| workspaces / bigDataPools | Yes | Yes |
| workspaces / kustoPools | Yes | Yes |
| workspaces / kustoPools / attacheddatabaseconfigurations | No | No |
| workspaces / kustoPools / databases | No | No |
| workspaces / kustoPools / databases / dataconnections | No | No |
| workspaces / sqlDatabases | Yes | Yes |
| workspaces / sqlPools | Yes | Yes |
Note
The Master database doesn't support tags, but other databases, including Azure Synapse Analytics databases, support tags. Azure Synapse Analytics databases must be in Active (not Paused) state.
Microsoft.TimeSeriesInsights
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| environments | Yes | No |
| environments / accessPolicies | No | No |
| environments / eventsources | Yes | No |
| environments / privateEndpointConnectionProxies | No | No |
| environments / privateEndpointConnections | No | No |
| environments / privateLinkResources | No | No |
| environments / referenceDataSets | Yes | No |
Microsoft.Web
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| apiManagementAccounts | No | No |
| apiManagementAccounts / apiAcls | No | No |
| apiManagementAccounts / apis | No | No |
| apiManagementAccounts / apis / apiAcls | No | No |
| apiManagementAccounts / apis / connectionAcls | No | No |
| apiManagementAccounts / apis / connections | No | No |
| apiManagementAccounts / apis / connections / connectionAcls | No | No |
| apiManagementAccounts / apis / localizedDefinitions | No | No |
| apiManagementAccounts / connectionAcls | No | No |
| apiManagementAccounts / connections | No | No |
| billingMeters | No | No |
| certificates | Yes | Yes |
| connectionGateways | Yes | Yes |
| connections | Yes | Yes |
| containerApps | Yes | Yes |
| customApis | Yes | Yes |
| customhostnameSites | No | No |
| deletedSites | No | No |
| functionAppStacks | No | No |
| generateGithubAccessTokenForAppserviceCLI | No | No |
| hostingEnvironments | Yes | Yes |
| hostingEnvironments / eventGridFilters | No | No |
| hostingEnvironments / multiRolePools | No | No |
| hostingEnvironments / workerPools | No | No |
| kubeEnvironments | Yes | Yes |
| publishingUsers | No | No |
| recommendations | No | No |
| resourceHealthMetadata | No | No |
| runtimes | No | No |
| serverFarms | Yes | Yes |
| serverFarms / eventGridFilters | No | No |
| serverFarms / firstPartyApps | No | No |
| serverFarms / firstPartyApps / keyVaultSettings | No | No |
| sites | Yes | Yes |
| sites / eventGridFilters | No | No |
| sites / hostNameBindings | No | No |
| sites / networkConfig | No | No |
| sites / premieraddons | Yes | Yes |
| sites / slots | Yes | Yes |
| sites / slots / eventGridFilters | No | No |
| sites / slots / hostNameBindings | No | No |
| sites / slots / networkConfig | No | No |
| sourceControls | No | No |
| staticSites | Yes | Yes |
| staticSites / builds | No | No |
| staticSites / builds / linkedBackends | No | No |
| staticSites / builds / userProvidedFunctionApps | No | No |
| staticSites / linkedBackends | No | No |
| staticSites / userProvidedFunctionApps | No | No |
| validate | No | No |
| verifyHostingEnvironmentVnet | No | No |
| webAppStacks | No | No |
| workerApps | Yes | Yes |
Microsoft.Workloads
| Resource type | Supports tags | Tag in cost report |
|---|---|---|
| monitors | Yes | Yes |
| monitors / providerInstances | No | No |
| phpWorkloads | Yes | Yes |
| phpWorkloads / wordpressInstances | No | No |
| sapVirtualInstances | Yes | Yes |
| sapVirtualInstances / applicationInstances | Yes | Yes |
| sapVirtualInstances / centralInstances | Yes | Yes |
| sapVirtualInstances / databaseInstances | Yes | Yes |
Next steps
To learn how to apply tags to resources, see Use tags to organize your Azure resources.