IotHub Device Configuration should allow device twin path to be properties.tags
it should be possible to create a device configuration with device twin properties containing certain tags
Check out the latest version of Azure Digital Twins, which has a new approach to device management!
Florin Bobis commented
This seems to be available currently only at the manage group enrollments section inside the device provisioning service.