Actions41
- Advanced Query Actions
- Alert Actions
- Exposure Score Actions
- Indicator Actions
- Investigation Actions
- Machine Actions
- Machine Action Actions
- Recommendation Actions
- Remediation Actions
- Software Actions
- Vulnerability Actions
Machine → Add Or Remove Tag
AI-generatedSummary
Add or remove a specified tag from a machine identified by its Machine ID in Microsoft Defender.
Inputs
- Authentication — Select authentication method; currently supports OAuth2 only.
- Machine ID (required) — The ID of the machine to add or remove tags for.
- Tag (required) — The tag value to add or remove from the machine.
- Action (required) — Choose whether to add or remove the tag from the specified machine.
Output shape
The API response from Microsoft Defender after adding or removing the tag, typically a JSON object indicating success or details of the update.
No pagination or batch processing required as operation targets a single machine ID and single tag action per request.