# tag:create

Last edited on 28 Aug 2025

## Scope Summary

Create resource tags

## Required Scopes

To add a scope to an API token, you must also add its required scopes. For example, to add a non-read scope for a resource type, you must also add the read scope for that resource type.

The following scopes are required for `tag:create`:

| Scope | Description |
|---|---|
| [`tag:read`](../../tag/read) | View resource tags |

## Associated Scopes

Associated scopes are not required, but they support full functionality of the scope they’re associated with.

For example, to create a Droplet, you need `droplet:create`. To tag a Droplet during creation, you additionally need `tag:create`, so `tag:create` is listed as an associated scope for `droplet:create`.

The following scopes are associated with `tag:create`:

| Scope | Description |
|---|---|
| [`app:update`](../../app/update) | Modify App Platform apps |
| [`database:update`](../../database/update) | Update Managed Databases |
| [`domain:update`](../../domain/update) | Modify domains and domain records |
| [`reserved_ip:update`](../../reserved_ip/update) | Modify Reserved IP addresses |
| [`image:update`](../../image/update) | Modify images |
| [`load_balancer:update`](../../load_balancer/update) | Modify load balancers |
| [`addon:update`](../../addon/update) | Modify marketplace addon resources |
| [`spaces:update`](../../spaces/update) | Manage Spaces object storage buckets |
| [`droplet:update`](../../droplet/update) | Modify Droplets |
| [`firewall:update`](../../firewall/update) | Modify Cloud firewalls |
| [`kubernetes:update`](../../kubernetes/update) | Modify Kubernetes clusters |