> ## Documentation Index
> Fetch the complete documentation index at: https://docs.lumos.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Adding Tags to Permissions

## Why this matters

Apps can have dozens, hundreds, or thousands of permissions with different naming conventions, which makes it difficult to know which ones are high-risk or in scope for audits.

Permission Tags let you categorize permissions so that you can:

* **Scope Reviews quickly and accurately** - select tags to scope the associated permissions into the review instead of selecting them one by one

* **Give Reviewers context** - make it obvious which permissions carry privilege or compliance relevance

* **Support audit clarity** - show which tags (and associated entitlements) were included when defining review scope

**Available tags:**

* SOC2
* SOX
* ISO27001
* PCI
* HITRUST
* Privileged (see details here)

### 1. Navigate to the Apps table > Single App > Permissions Tab

### 2. Add Tags to Permissions

Why am I already seeing the `Privileged` Tag on some of my Permissions? See [here](/kb/ui-ux/adding-tags-to-permissions#privileged-tag).

**Navigate** to the Tags column for a specific permission

**Click** on Add

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/79fcdaee8e45-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761691723292-image.png" alt="image.png" />
</Frame>

**Select** one or more Tags from the options

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/0d38b6cf430d-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761691794036-image.png" alt="image.png" />
</Frame>

**Click** Apply

**View** added Tags

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/3902938b8d07-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761691887240-image.png" alt="image.png" />
</Frame>

**Hover** over Tags to see the Edit button

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/4f988c2bd119-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761692201544-image.png" alt="image.png" />
</Frame>

**Click** on the Edit button to add/remove tags

### 3. Add Tags to Permissions in bulk

**Multi-select** Permissions to add Tags in bulk

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/5117dedcaee4-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761692318880-Screensh.png" alt="Screenshot 2025-10-28 at 3.58.34 PM.png" />
</Frame>

**Click** on the Tags drop down to add Tags to the selected Permissions

**Select** Tags to add to Permissions

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/1d685fe103a4-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761692376693-image.png" alt="image.png" />
</Frame>

**Click** Apply

Tags applied in bulk will be added to the existing Tags for the selected Permissions. They will not replace existing Tags.

### 3. Add Tags to Permissions via CSV upload

**Download** CSV via the CSV download icon

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/b2ad375ea251-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761692854573-image1.png" alt="image1.png" />
</Frame>

**Update** the CSV file with relevant Tags. For multiple Tags, separate with a comma

**Click** on Enrich Permissions to upload the updated CSV

<img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/4395a3dae8be-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761693016429-image252.png" alt="image (10).png" />

**Select** the appropriate CSV file (max size of 10 MB supported)

<img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/32b78f141f57-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761693030906-image252.png" alt="image (11).png" />

**Map** your CSV columns and specify the delimiter used

<Frame>
  <img src="https://mintlify.s3.us-west-1.amazonaws.com/lumos-primary/images/kb/ui-ux/adding-tags-to-permissions/34ba67e78da3-a84855c7-648f-4a4a-b3b3-115b7fbfa78d2F1761693179784-Screensh.png" alt="Screenshot 2025-10-28 at 4.12.34 PM.png" />
</Frame>

The Permission ID column is required. Learn more about Permission Display Names and Descriptions [Adding Permission Display Names and Descriptions](/kb/ui-ux/adding-permission-display-names-and-descriptions)

**Confirm** that permissions should be updated.

Tags in the CSV will overwrite applied Tags in the Table

## Scoping Access Reviews using Tags

See [Choosing Access Review Apps](/kb/access-reviews/preparing-and-completing-an-access-review/choosing-access-review-apps)and [Scoping Your Access Review](/kb/access-reviews/preparing-and-completing-an-access-review/scoping-your-access-review)

## Privileged Tag

* Lumos will auto-add the `Privileged` tag to Permissions where it detects keywords like `"Admin"`, `"SuperUser"`, or `"Super User"`
* You can manually remove this Tag and can manually add it to Permissions
* Once it is manually removed from a Permission, it will not be auto re-added to that Permission
* The `Privileged` Tag from the Permissions tab will be reflected in the Categories column in the Access Review. See [Understanding Categories in the Access Review](/kb/access-reviews/preparing-and-completing-an-access-review/understanding-categories-in-the-access-review)

If you'd like this Privileged Tag feature turned off, please reach out to Lumos Support

To turn Privileged Tag feature off, add customer's domain to FF: **fis-tag-privileged-entitlements**