Policies for Tags Service
Shows how to allow Disaster Recovery (DR) to use Tag namespaces. This access is required when launching compute instances as part of DR plan executions.
Allow group group_name to use tag-namespaces in tenancy tenancy_name
For additional about the Identity and Access Management (IAM) policies for Tags, refer Required IAM Policy.