I need to expand on this request as the opposite situation has now come up.  Not only do we have someone who needs to be able to update metadata but not tags, but we now have someone who needs to be able to apply tags but not change metadata.  This particular customer has the template data locked down once a document is in Records Management to prevent accidental or malicious changes except by a select group of people.  The problem is that they want to be able to use tags to assist in processes done throughout the year (such as I-9 verification) or to mark misfiled documents so those people who can edit the template are notified of an issue.  We really need the ability to apply tags separated from the "Write Metadata" entry access right.