Complete Azure VM tagging before generalizing an image source

Source facts

Microsoft’s resource-tag support reference states that a tag cannot be added to a virtual machine once it has been marked generalized. The reference identifies Set-AzVm with Generalized and az vm generalize as the operations that mark that state. Microsoft Learn.

Applicability

Apply this review to a VM image-preparation plan that includes generalization. Identify the source VM and the metadata needed for ownership, image provenance and later cleanup. Confirm the intended lifecycle before taking any generalization action; this article is not a generalization procedure.

DSE recommendation

DSE recommends placing tag review before the generalization approval point. Ask the image owner to confirm required names and values, then record the agreed metadata with the build record. Preserve the source VM’s resource identifier independently of display tags. If required metadata is missing after generalization, evaluate the situation with the image owner instead of repeatedly attempting the same tag addition.

Verification

Before the approved image-preparation step, read back the VM’s tags and compare them with the build record. Verify spelling and ownership values, then record the state at the handoff. For a rehearsal, document the observed post-generalization restriction without modifying unrelated resources. Keep the tag evidence tied to the exact VM used for the image build.

Official references

Microsoft Learn: Tag support for resources.