vSphere Tagging Privileges

vSphere Tagging privileges control the ability to create and delete tags and tag categories, and assign and remove tags on vCenter Server inventory objects.

You can set this privilege at different levels in the hierarchy. For example, if you set a privilege at the folder level, you can propagate the privilege to one or more objects within the folder. The object listed in the Required On column must have the privilege set, either directly or inherited.

Table 1. vSphere Tagging Privileges

Privilege Name	Description	Required On
vSphere Tagging.Assign or Unassign vSphere Tag	Allows assignment or unassignment of a tag for an object in the vCenter Server inventory.	Any object
vSphere Tagging.Assign or Unassign vSphere Tag on Object	Allows objects to have tags assigned or unassigned. Use this privilege to limit which objects users are able to assign or unassign tags to.	Any object
vSphere Tagging.Create vSphere Tag	Allows creation of a tag.	Any object
vSphere Tagging.Create vSphere Tag Category	Allows creation of a tag category.	Any object
vSphere Tagging.Delete vSphere Tag	Allows deletion of a tag.	Any object
vSphere Tagging.Delete vSphere Tag Category	Allows deletion of a tag category.	Any object
vSphere Tagging.Edit vSphere Tag	Allows editing of a tag.	Any object
vSphere Tagging.Edit vSphere Tag Category	Allows editing of a tag category.	Any object
vSphere Tagging.Modify UsedBy Field for Category	Allows changing the UsedBy field for a tag category.	Any object
vSphere Tagging.Modify UsedBy Field for Tag	Allows changing the UsedBy field for a tag.	Any object