SecurityInsight settings · Settings > Connectors & CMDB
Where Azure tags may be written
| Key | SI_Bootstrap_TaggingScopes |
|---|---|
| Where | Settings > Connectors & CMDB > Asset tagging |
| Type | List |
| Default | The same scopes the jobs read from (the subscription by default) |
| Edition | Community |
What it does
The Azure scopes, such as subscriptions or resource groups, where the asset tagging identity may write resource tags.
When set
A narrower list limits where tags can ever be written; a wider list allows tagging in more places. Rights are granted only when tagging write rights are granted.
When blank or default
Left blank, the default applies: The same scopes the jobs read from (the subscription by default)
Risk and how to reverse it
Affects what SecurityInsight writes to your CMDB or ticketing systems. Reversible for future runs, but changes already written there stay; the connector's own guards hold large or unsafe changes.
Requires
Nothing else.
Recommended
Keep the default. Change it when: When tags should only be written in part of your estate.
Documented for SecurityInsight 3.0.79. Written by the SecurityInsight team; Invardia publishes it. · All settings · Security review pack