Merge pull request #48795 from tfitzmac/0810tags

fixes MicrosoftDocs/azure-docs#13149

Author: Ja-Dunn

articles/azure-resource-manager/resource-group-using-tags.md

@@ -13,14 +13,16 @@ ms.workload: multiple
 ms.tgt_pltfrm: AzurePortal
 ms.devlang: na
 ms.topic: conceptual
-ms.date: 05/16/2018
+ms.date: 08/10/2018
 ms.author: tomfitz
 
 ---
 # Use tags to organize your Azure resources
 
 [!INCLUDE [resource-manager-governance-tags](../../includes/resource-manager-governance-tags.md)]
 
+To apply tags to resources, the user must have write access to that resource type. To apply tags to all resource types, use the [Contributor](../role-based-access-control/built-in-roles.md#contributor) role. To apply tags to only one resource type, use the contributor role for that resource. For example, to apply tags to virtual machines, use the [Virtual Machine Contributor](../role-based-access-control/built-in-roles.md#virtual-machine-contributor).
+
 [!INCLUDE [Handle personal data](../../includes/gdpr-intro-sentence.md)]
 
 ## PowerShell