Home > Storage > ObjectScale and ECS > Product Documentation > ECS IAM Introduction > Tagging IAM entities (users and roles)
Custom attributes can be added to users and roles using a tag key-value pair. These tags can be used to control an entity's access to resources or to control what tags can be attached to an entity. Groups and policies cannot be tagged. You can apply the same tag to multiple entities, but multiple tags on one entity cannot have the same key. ECS allows up to 50 tags per IAM entity.