Hey folks,
We're looking to add a specific tag to all the resources in our Azure environment. We set it up at the resource group level and used a policy to have it inherit down to the child resources. But here's the catch: some resources just don't seem to support tags like others do. I really want to figure out a way to identify which resources or resource types aren't compatible with tagging.
It's not as simple as just checking for untagged resources, since some recently deployed ones are intentionally left out of the tagging policy. So I'm seeking suggestions or best practices to pinpoint those non-tag-supporting resource types. Any help?
3 Answers
You might want to check this resource: https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-support. It outlines which resource types support tags and might help you identify the ones that don’t!
If you're just looking to filter down to tag-supporting resources, you can set your policy mode to indexed. This way, it will apply only to resources that are compatible with tags.
Just a heads up: when you use tag inheritance with policies, it can complicate things, especially if you're trying to apply tags with Bicep. You might end up with some unintended consequences, so keep that in mind.

Yeah, I’ve seen that list. I’m hoping to pull this info through Azure Resource Graph queries or PowerShell so I can get a count of the non-taggable resources.