Entra Policy Suite settings · Settings > Named locations

Keep the Azure service tags as named locations

Key	NamedLocations.Enabled
Where	Settings > Named locations
Type	On / off
Default	Off

What it does

Switches the daily named-locations job on (v1's EntraNamedLocations_AzureNetworkServiceTags.ps1): for each service tag in the list (v1's CSV, imported on the Import v1 page) it reads the tag's IP prefixes and keeps the named location 'Azure.Network.ServiceTag.<tag>' up to date - written only when the prefixes changed, or when the location is missing.

When enabled

Used from the next daily run (06:00, or Run now on the Jobs page).

When disabled

Off (the default): the job does not run and the service-tag named locations stay as they are.

Risk and how to reverse it

It changes named locations in the tenant, but ONLY those whose name starts 'Azure.Network.ServiceTag.' - never another one, never a policy. A policy that uses such a location follows the new prefixes. Reversible: switch it off.

Requires

Admin. The engine's right to write named locations (granted by the install).