# tag:create

Last edited on 30 Jun 2025

## Permission Summary

Create resource tags

## Required Permissions

To add a permission to a custom role, you must also add its required permissions.

For example, to add a non-read permission for a resource type, you must also add the read permission for that resource type.

The following permissions are required for `tag:create`:

| Permission | Description |
|---|---|
| [`tag:read`](../../tag/read) | View resource tags |

## Associated Permissions

Associated permissions are not required, but they support full functionality of the permission they’re associated with.

For example, to create a Droplet, you need `droplet:create`. To tag a Droplet during creation, you additionally need `tag:create`, so `tag:create` is listed as an associated permission for `droplet:create`.

The following permissions are associated with `tag:create`:

| Permission | Description |
|---|---|
| [`app:update`](../../app/update) | Modify App Platform apps |
| [`database:update`](../../database/update) | Update Managed Databases |
| [`domain:update`](../../domain/update) | Modify domains and domain records |
| [`reserved_ip:update`](../../reserved_ip/update) | Modify Reserved IP addresses |
| [`image:update`](../../image/update) | Modify images |
| [`load_balancer:update`](../../load_balancer/update) | Modify load balancers |
| [`addon:update`](../../addon/update) | Modify marketplace addon resources |
| [`spaces:update`](../../spaces/update) | Manage Spaces object storage buckets |
| [`block_storage:update`](../../block_storage/update) | Update Block Storage volumes |
| [`droplet:update`](../../droplet/update) | Modify Droplets |
| [`firewall:update`](../../firewall/update) | Modify Cloud firewalls |
| [`kubernetes:update`](../../kubernetes/update) | Modify Kubernetes clusters |