...
Each user can have up to 100 tags assigned to them and the maximum length of each tag is 100 characters. The tags can consist of any character, but they are automatically converted to lower case, so when a tag “My_TAG“ is created, it will be converted to “my_tag“. This applies to both UI and the REST API.
The users' tags can be added and removed by any user or management API client with permission to modify users. Also, the user tags can be seen by any user or management API client with permissions to view user accounts.
It is recommended to use some application specific prefix for all the tags that are used by the application. For example, you can prefix all the tags you create with “xyz_“ so the tags will end up something like “xyz_tag1“, “xyz_another_tag” and so on.
Because the tags are only meaningful to the external applications, you can also obfuscate the true meaning of the tag by giving it some seemingly random name. For example, the tag could simply be “xyz_8340“ and it would be difficult for anyone but its creator to tell what the tag actually means. Of course, the actual meaning should be documented somewhere in the application’s internal documentation.