az resource tag failing to update replicated storage accounts

[zoeperryman]

Describe the bug

When trying to add tags to a storage account I get an error when the storage account is replicated to another region.

Command Name
az resource tag

Errors:

Code: AccountPropertyCannotBeUpdated
Message: The property 'secondaryLocation' was specified in the input, but it cannot be updated as it is read-only. For more information, see - https://aka.ms/storageaccountupdate

To Reproduce:

Steps to reproduce the behavior.

• Create a replicated storage account, in my case it is a Geo-redundant storage (GRS)
• az resource tag -g myGroup -n myStorageaccount --resource-type "Microsoft.Storage/storageAccounts" --tags Zoe=1

Expected Behavior

I expect the tags to be added to the storage account. I have no ability to provide (or omit) the secondaryLocation on the az resource tag command.

This works perfectly fine for most storage accounts, but fails on the one that is setup for replication.

Environment Summary

Windows-11-10.0.22631-SP0
Python 3.12.7
Installer: MSI

azure-cli 2.67.0

Extensions:
datafactory 1.0.2
datamigration 1.0.0b2
maintenance 1.6.0
monitor-control-service 1.2.0
scheduled-query 1.0.0b1

Dependencies:
msal 1.31.0
azure-mgmt-resource 23.1.1

Additional Context

Similar to an issue I have with tagging managed instances: #30095

[yonzhan]

Thank you for opening this issue, we will look into it.

[zoeperryman]

Workaround appears to be to call the az storage account update command instead

az storage account update -g myGroup -n myStorageaccount --tags Zoe=1