diff --git a/pkg/yunionconf/policy/resources.go b/pkg/yunionconf/policy/resources.go
index 422289bead..0ce7e9d8ff 100644
--- a/pkg/yunionconf/policy/resources.go
+++ b/pkg/yunionconf/policy/resources.go
@@ -24,8 +24,10 @@ var (
 		"scopedpolicies",
 		"scopedpolicybindings",
 	}
-	yunionconfDomainResources = []string{}
-	yunionconfUserResources   = []string{
+	yunionconfDomainResources = []string{
+		"tags",
+	}
+	yunionconfUserResources = []string{
 		"parameters",
 	}
 )