AzPolicyAdvertizer

last sync: 2025-Nov-03 18:22:57 UTC

Require a tag on resource groups

Azure BuiltIn Policy definition

Source

Azure Portal

Display name

Require a tag on resource groups

96670d01-0a4d-4649-9c89-2d3abc0a5025

Version

1.0.0
Details on versioning

Versioning

Versions supported for Versioning: 1
1.0.0
Built-in Versioning [Preview]

Category

Tags
Microsoft Learn

Description

Enforces existence of a tag on resource groups.

Cloud environments

AzureCloud = true
AzureUSGovernment = unknown
AzureChinaCloud = unknown

Available in AzUSGov

Unknown, no evidence if Policy definition is/not available in AzureUSGovernment

Mode

All

Type

BuiltIn

Preview

False

Deprecated

False

Effect

Fixed
deny

RBAC role(s)

none

Rule aliases

none

Rule resource types

IF (1)

Microsoft.Resources/subscriptions/resourceGroups

Compliance

Not a Compliance control

Initiatives usage

none

History

Date/Time (UTC ymd) (i)	Change type	Change detail
2020-03-10 16:29:49	change	Previous DisplayName: Require specified tag on resource groups

JSON compare

n/a

JSON

api-version=2021-06-01
EPAC

{7 itemsdisplayName: "Require a tag on resource groups",
policyType: "BuiltIn",
mode: "All",
description: "Enforces existence of a tag on resource groups.",
metadata: {2 itemsversion: "1.0.0",
category: "Tags"
},
parameters: {1 itemtagName: {2 itemstype: "String",
metadata: {2 itemsdisplayName: "Tag Name",
description: "Name of the tag, such as 'environment'"
}
}
},
policyRule: {2 itemsif: {1 itemallOf: [2 items{2 itemsfield: "type",
equals: "Microsoft.Resources/subscriptions/resourceGroups"
},
{2 itemsfield: 🔍"[
    concat(
       'tags[
           ',
             parameters('tagName'),
           '
        ]'
    )
]",
exists: "false"
}
]
},
then: {1 itemeffect: "deny"
}
}
}