Oracle Cloud Infrastructure Documentation

Understanding Automatic Tag Defaults

Use tag defaults to manage resources in your tenancy, including tracking costs by principal name and the date resources are created. In tenancies created after December 17, 2019, the Oracle-Tags tag namespace and two tag defaults are automatically added to the root compartment. These tag defaults apply tags to all resources with the following values: 

  • CreatedBy tag: This tag is used to automatically record the name of the principal that created the resource. This tag is used for cost tracking.
  • CreatedOn tag: This tag is used to automatically record the date and time the resource was created.

When users create resources in your tenancy, each tag is added to the resource by OCI, and the values are generated automatically through the use of tag variables. For more information on variables, see Using Tag Variables.

The tenancy administrator has permission to update or delete the Oracle-Tags tag namespace. If the Oracle-Tags namespace isn't present, the CreatedBy and CreatedOn tags aren't automatically applied during resource creation.

Required IAM Policy

The CreatedBy and CreatedOn tag defaults require that the user have use or manage permissions for tag-namespaces. For more information, see Required Permissions for Working with Defined Tags.

Important

If users try to create resources in the Console without use or manage permissions for tag-namespaces, the Console returns an error message stating "The following tag namespaces / keys are not authorized or not found: 'oracle-tags'."

If you are new to policies, see Managing Identity Domains and Common Policies. If you want to dig deeper into writing policies for groups or other IAM components, see Details for IAM without Identity Domains.

Working with Automatic Tag Defaults

You can use the cost-tracking tag feature to check usage or to filter resources by date. You can remove and update tags automatically applied to resources as you would any other tag. For more information, see Using Cost-Tracking Tags and Resource Tags.

If you no longer want these tags applied to resourced automatically, you can remove the tag defaults that Oracle created. Although Oracle created the tag defaults, they are ordinary tag defaults that you can manage as you would any other. For more information, see Managing Tag Defaults.