In Bitbucket server I was able to use the Branch permissions to restrict which users could create or edit tags using a branch pattern of `/tags/`. The Branch restrictions in Bitbucket Cloud do not appear to work this way and I do not see any way of restricting access to edit tags. This should also be configurable at the Project level and inherited by the Repositories.

This is a critically important feature as tags are commonly used to version releases and trigger builds and very few users should have access to set them. This is especially true when, once set, they cannot be easily removed.