In Aria Automation after creating a Day 2 action policy for users to limit which actions they can perform you still see the "Update Tags" option for volumes even though this is not one of the actions specified in the policy.
Aria Automation 8.18.1
Issue only applies to boot disks as in the database they are recognized as being apart of a seperate "hidden deployment" and not a disk under the deployment.
Fix to be included in Aria Automation 8.18.1 Patch 4