Access Tags
Access Tags in Bridge Access Management enable organizations to define and manage resource-level access control through a simple and scalable key-value tagging system. This feature empowers administrators to organize, restrict and assign access policies based on defined access tags, ensuring secure and efficient resource management. Non-Administrative users can only view access tags created for the account. They can neither create nor delete access tags.
This update introduces the ability to create and delete account-wide access tags using a key-value format. These tags can then be used when authoring access policies for users or access groups, especially when choosing attribute-based access control (ABAC).
With access tags, you can manage resource segmentation, enforce fine-grained access control and streamline policy definitions using standardized labels. For instance, tags like Environment:Dev or Project:Finance can help enforce which users can access which environments or project resources.
Prerequisites
To create or delete access tags:
- You must have the Administrator role in the Kyndryl Bridge account.
Accessing the Access Tags page
From the Kyndryl Bridge main menu 
, go to Administration→ Bridge Access Management → Access Tags
Creating access tags
To create an access tag, complete the following steps:
- On the Access Tags page, click Add Access Tags.
- Enter a Tag Key (e.g., Environment)
- Enter a Tag Value (e.g., Dev)
- Click Add tag + to add multiple tag entries (up to 10 total).
- Click Add Access Tag to save.
Validation and error
- Each key:value pair must be unique.
- Access tags, both key and value, are case sensitive.
- If a tag already exists, an error will display:
- "The newly added key:value pairs must be unique."
- "Key already in use. Please enter a unique value."
- "Value already in use. Please enter a unique value."
Deleting access tags
- To delete access tags, locate the access tag and select the Delete
icon next to their name.
- Confirm the action when prompted.
Access tags cannot be edited, they can only be created or deleted.