Stay organized with collectionsSave and categorize content based on your preferences.
This page describes Google Cloud tags and how to use them with
Dataproc Metastore. To add tags to Dataproc Metastore
Services and Federations using the Google Cloud CLI, seeAttach and manage
tags.
Overview of tags
Google Cloud tags_ are key-value pairs that you can use to organize your
Dataproc Metastore resources.
For example, a tag key can be a property, such asenvironment, and the tag
value can be an attribute, such asdevelopmentorproduction. A tag can have
only one value for a given key on a particular resource.
Tags are created at theorganizationorprojectlevel. In Dataproc Metastore, they are attached to the service or
or federation resources through the Resource Manager, which is used across
Google Cloud.
You can add a reference to tags inIdentity and Access Management (IAM) policy
bindingsto grant conditional access to
resources. Tags are different fromlabelswhich
are another way to organize and filter your
Dataproc Metastore resources. Tags and labels work independently
of each other, and you can use both on the same
Dataproc Metastore resource.
Grant permissions based on conditional tag bindings
After you attach a tag to an Dataproc Metastore resource, you can
use the tag with IAM Conditions to conditionally grant access to
Dataproc Metastore resources. For more information about setting
conditions based on tags, seeResource
tags.
IAM Conditions let you impose fine-grained access control on
Dataproc Metastore resources.
To use IAM Conditions, you reference the tags in IAM
policy bindings. For more information about how to control access to your
Google Cloud resources using use tags with IAM, seeTags and
conditional access.
Limitations
Tags have the following restrictions:
You can't attach tags to the instance resource in
Dataproc Metastore.
Backup and metadata import resources don't inherit tags from their corresponding services.
[[["Easy to understand","easyToUnderstand","thumb-up"],["Solved my problem","solvedMyProblem","thumb-up"],["Other","otherUp","thumb-up"]],[["Hard to understand","hardToUnderstand","thumb-down"],["Incorrect information or sample code","incorrectInformationOrSampleCode","thumb-down"],["Missing the information/samples I need","missingTheInformationSamplesINeed","thumb-down"],["Other","otherDown","thumb-down"]],["Last updated 2025-09-04 UTC."],[[["\u003cp\u003eGoogle Cloud tags are key-value pairs used to organize Dataproc Metastore resources, such as by defining properties like \u003ccode\u003eenvironment\u003c/code\u003e with values like \u003ccode\u003edevelopment\u003c/code\u003e or \u003ccode\u003eproduction\u003c/code\u003e.\u003c/p\u003e\n"],["\u003cp\u003eTags are created at the organization or project level and can be attached to Dataproc Metastore services or federation resources through the Resource Manager.\u003c/p\u003e\n"],["\u003cp\u003eTags can be referenced in Identity and Access Management (IAM) policy bindings to grant conditional access to resources, offering fine-grained access control.\u003c/p\u003e\n"],["\u003cp\u003eTags differ from labels, which are another way to organize resources, and both can be used independently on the same Dataproc Metastore resource.\u003c/p\u003e\n"],["\u003cp\u003eTags cannot be attached to instance resources, and they are not inherited by backups and metadata imports from their corresponding services.\u003c/p\u003e\n"]]],[],null,["# Organize resources using tags\n\nThis page describes Google Cloud tags and how to use them with\nDataproc Metastore. To add tags to Dataproc Metastore\nServices and Federations using the Google Cloud CLI, see [Attach and manage\ntags](/dataproc-metastore/docs/manage-tags).\n\nOverview of tags\n----------------\n\nGoogle Cloud tags_ are key-value pairs that you can use to organize your\nDataproc Metastore resources.\n\nFor example, a tag key can be a property, such as `environment`, and the tag\nvalue can be an attribute, such as `development` or `production`. A tag can have\nonly one value for a given key on a particular resource.\n\nTags are created at the\n[organization](/resource-manager/docs/cloud-platform-resource-hierarchy#organizations)\nor [project](/resource-manager/docs/cloud-platform-resource-hierarchy#projects)\nlevel. In Dataproc Metastore, they are attached to the service or\nor federation resources through the Resource Manager, which is used across\nGoogle Cloud.\n\nYou can add a reference to tags in [Identity and Access Management (IAM) policy\nbindings](/iam/docs/tags-access-control) to grant conditional access to\nresources. Tags are different from\n[labels](/resource-manager/docs/creating-managing-labels#what-are-labels) which\nare another way to organize and filter your\nDataproc Metastore resources. Tags and labels work independently\nof each other, and you can use both on the same\nDataproc Metastore resource.\n\nGrant permissions based on conditional tag bindings\n---------------------------------------------------\n\nAfter you attach a tag to an Dataproc Metastore resource, you can\nuse the tag with IAM Conditions to conditionally grant access to\nDataproc Metastore resources. For more information about setting\nconditions based on tags, see [Resource\ntags](/iam/docs/conditions-attribute-reference#resource-tags).\nIAM Conditions let you impose fine-grained access control on\nDataproc Metastore resources.\n\nTo use IAM Conditions, you reference the tags in IAM\npolicy bindings. For more information about how to control access to your\nGoogle Cloud resources using use tags with IAM, see [Tags and\nconditional access](/iam/docs/tags-access-control).\n\nLimitations\n-----------\n\nTags have the following restrictions:\n\n- You can't attach tags to the instance resource in Dataproc Metastore.\n- Backup and metadata import resources don't inherit tags from their corresponding services.\n\nWhat's next\n-----------\n\n- Learn how to [create and manage tags](/resource-manager/docs/tags/tags-creating-and-managing) using Resource Manager.\n- See specific `gcloud CLI` commands for Dataproc Metastore in [Manage tags on\n Dataproc Metastore](/dataproc-metastore/docs/manage-tags)."]]
