I am getting a missing tag error on storage account creation

Question

I am getting a missing tag error on storage account creation

Kristjan Sander 0

I am getting the error below when trying to create a storage account following a tutorial of a Udemy course. I do not understand the message as I have not created any tags. How can I found out what tag is it missing?

Resource 'ManagedPlatform' was disallowed by policy. Policy identifiers: '[{"policyAssignment":{"name":"Required Tags","id":"/providers/Microsoft.Management/managementGroups/15cd778b-2b28-4ebc-956c-b5977a36cd28/providers/Microsoft.Authorization/policyAssignments/Required Tags"},"policyDefinition":{"name":"Required Tags","id":"/providers/Microsoft.Management/managementGroups/15cd778b-2b28-4ebc-956c-b5977a36cd28/providers/Microsoft.Authorization/policyDefinitions/Required Tags","version":"1.0.0"}}]'.

1 answer

Your answer

Answer 1

Q&A Assist

AI generated content. This question contains an answer created with AI from Q&A Assist. Learn more

The error message you are encountering indicates that there is a policy in place requiring specific tags to be added to your storage account during creation. The policy named "Required Tags" is enforcing this requirement, and it appears that you have not provided the necessary tags, even if you did not explicitly create any.

To resolve this issue, you will need to check the details of the policy that is assigned to your Azure subscription or management group. Here are the steps you can take:

Review the Policy Assignment: Go to the Azure portal and navigate to the "Policy" section. Look for the policy assignment named "Required Tags". This will provide you with the details of what tags are required.
Add Required Tags: Once you identify the required tags, you can add them during the storage account creation process. Tags are typically in the format of key-value pairs (e.g., Environment: Production).
Consult Documentation: If you need further assistance, refer to Azure's documentation on managing policies and tags to understand how to comply with the requirements set by your organization.

By following these steps, you should be able to identify the missing tag and successfully create your storage account.

Kristjan Sander 0 Reputation points

2025-12-04T10:21:18.28+00:00

The AI gives the following answer:

Review the Policy Assignment: Go to the Azure portal and navigate to the "Policy" section. Look for the policy assignment named "Required Tags". This will provide you with the details of what tags are required.

I already tried that but could not find out how to search for a policy assignment.

Help will be much appreciated.
Suchitra Suregaunkar 3,545 Reputation points Microsoft External Staff Moderator

2025-12-04T12:31:36.2033333+00:00
Hello Kristjan Sander

Your storage account deployment is blocked by an Azure Policy assignment named “Required Tags” at the management‑group scope. That assignment enforces that new resources include specific tags (e.g., costCenter, environment), otherwise the request is denied.

How to find the assignment and see which tag is required:

Method 1: Azure Portal (set scope first)

Open Azure Portal → Policy.

At the top, click Scope. Select the Management group shown in your error and Apply. Assignments at MG scope don’t appear if you’re scoped only to a subscription/RG.

In the left pane, select Assignments (not “Definitions”).

Use the filter bar: Display name contains → Required Tags.

Open the “Required Tags” assignment → Parameters.

Look for tagName (e.g., costCenter) and, if enforced, tagValue / allowed values.

If it’s an initiative, open View definition and inspect each component policy’s Parameters.

Method 2: Activity Log (shows the exact deny)

Go to the subscription (or RG) where you tried the deployment.

Open Monitor → Activity log.

Set Category = Policy and time range = when the failure occurred.

Open the Deny event → expand Properties to see the policyAssignmentId and policyDefinitionId that blocked your request (this confirms the assignment and its scope).

If your organization wants to avoid manual tagging, your admin can also assign the built‑in “Inherit a tag from the resource group if missing” (effect: modify) so resources inherit RG tags automatically and are not blocked by “Required Tags”.

Thanks,

Suchitra.
Suchitra Suregaunkar 3,545 Reputation points Microsoft External Staff Moderator

2025-12-05T12:53:38.7233333+00:00

Hello Kristjan Sander

Could you please let us know if the solution shared addressed your query?

Thanks,

Suchitra.

Share via

I am getting a missing tag error on storage account creation

1 answer

Your answer