# Tags Reference Guide

Tags have several uses, mainly to drive policies, but they can be used for the following purposes:

* Use tags for global subscription or data policies that will apply to all data sources in the organization. In doing this, company-wide data security restrictions can be controlled by the administrators and governors, while the users and data owners need only to worry about tagging the data correctly.
* Generate Immuta reports from tags for anything from insider threat surveillance to data access monitoring.
* Drive search results with tags in the Immuta UI.

Every user within Immuta can see tags, but they will all interact with them differently as their roles require. Governors create, manage, and delete tags or import tags from [external catalogs](https://documentation.immuta.com/SaaS/configuration/tags/how-to-guides/managing-tags#import-tags-from-an-external-catalog). Data owners, data source experts, and governors apply these tags to or remove them from [projects](https://documentation.immuta.com/SaaS/configuration/tags/how-to-guides/data-source-tags#manage-project-tags), [data sources](https://documentation.immuta.com/SaaS/configuration/tags/manage-tags/how-to-guides/data-source-tags), and [columns within the data sources](https://documentation.immuta.com/SaaS/configuration/tags/how-to-guides/data-source-tags#add-tags-to-the-data-dictionary). Data users [view tags and tag metadata](https://documentation.immuta.com/SaaS/configuration/tags/how-to-guides/managing-tags#view-data-source-tags) on data sources they have access to.

{% hint style="info" %}
**Managing tags best practice**: Use the minimum number of tags possible to achieve the data privacy needed.
{% endhint %}

## Audit

The following tag-related events are [audited](https://documentation.immuta.com/SaaS/govern/detect-your-data/audit/reference-guides/index/uam-schema) and can be found on the [audit page in the UI](https://documentation.immuta.com/SaaS/govern/detect-your-data/audit/how-to-guides/use-immuta-audit):

* [TagApplied](https://documentation.immuta.com/SaaS/govern/detect-your-data/audit/reference-guides/index/uam-schema#tagapplied-event): A tag is applied to a data source or column.
* [TagCreated](https://documentation.immuta.com/SaaS/govern/detect-your-data/audit/reference-guides/index/uam-schema#tagcreated-event): A tag is created.
* [TagDeleted](https://documentation.immuta.com/SaaS/govern/detect-your-data/audit/reference-guides/index/uam-schema#tagdeleted-event): A tag is deleted.
* [TagRemoved](https://documentation.immuta.com/SaaS/govern/detect-your-data/audit/reference-guides/index/uam-schema#tagremoved-event): A tag is removed from a data source or column.
* [TagUpdated](https://documentation.immuta.com/SaaS/govern/detect-your-data/audit/reference-guides/index/uam-schema#tagupdated-event): A tag name is updated.