command line interface - How can I apply name=value tags to service principals in Azure? - Stack Overflow

I'm having trouble determining a clear answer on tagging Service Principals as the documentation seems to say you can't do it () while several github and other resources have a command for it like so:

az ad sp update --id <service_principal_id> --add tags "<tag_key>=<tag_value>"

To confirm, I created a Service Principal in my private portal instance for test purposes. I played with it a bit and believe this code should be correct:

$sp = Get-AzADServicePrincipal -DisplayName "tempdelete"
$tags = @{"name"="value"}
Set-AzResource -ResourceId $sp.Id -Tag $tags

When I do this, I get the following error:

az account set --subscription <mysubid>
Set-AzResource: MissingSubscription : The request did not have a subscription or a valid tenant level resource provider.
CorrelationId: <some correlation id that changes every time>

The app is part of that subscription (it's my only subscription) and I'm not sure what I need to change to make this work.

I'm having trouble determining a clear answer on tagging Service Principals as the documentation seems to say you can't do it (https://learn.microsoft.com/en-us/azure/azure-resource-manager/management/tag-support) while several github and other resources have a command for it like so:

az ad sp update --id <service_principal_id> --add tags "<tag_key>=<tag_value>"

To confirm, I created a Service Principal in my private portal instance for test purposes. I played with it a bit and believe this code should be correct:

$sp = Get-AzADServicePrincipal -DisplayName "tempdelete"
$tags = @{"name"="value"}
Set-AzResource -ResourceId $sp.Id -Tag $tags

When I do this, I get the following error:

az account set --subscription <mysubid>
Set-AzResource: MissingSubscription : The request did not have a subscription or a valid tenant level resource provider.
CorrelationId: <some correlation id that changes every time>

The app is part of that subscription (it's my only subscription) and I'm not sure what I need to change to make this work.

• azure
• command-line-interface
• azureportal

Share Improve this question Follow asked Jan 9 at 18:21 not_a_generic_usernot_a_generic_user 2,19833 gold badges2323 silver badges4040 bronze badges 1

• In Azure, tagging service principals directly is not supported in the same way that you can tag other Azure resources. The documentation you referenced correctly states that service principals do not have built-in support for tags. I cross checked with MS doc, there is --add but --add tag not there in documentation. – Arko Commented Jan 10 at 3:52

Add a comment  | 

1 Answer 1

Sorted by: Reset to default 1

There are no particular tags for service principal. Tags will only support azure resources.

Alternatively, you can assign the tag name and tag values using notes. For reference check below-

az ad sp update --id '12345-11bc-123-456-57d4362d6ee9' --set notes="Tag: Env=dev"

az ad sp show --id '123457-17bc-4f0a-b432-abcdefgh'

You can also filter the application based on the tag value and tag name

az ad sp list --query "[?notes!=null && contains(notes, 'Tag: Env=dev')]" --all --output json