Policies for Tags Service
Shows how to allow Disaster Recovery (DR) to use Tag namespaces. This access is required when launching compute instances as part of DR plan executions.
Policies to configure using resource principal
Allow dynamic-group <Dynamic_group_Name> to use tag-namespaces in tenancy tenancy_name
Policies to configure using user authentication
Allow group group_name to use tag-namespaces in tenancy tenancy_name
For additional about the Identity and Access Management (IAM) policies for Tags, refer Required IAM Policy.