diff --git a/services/graph/pkg/service/v0/tags.go b/services/graph/pkg/service/v0/tags.go
index 22a9720d95..b8310c970e 100644
--- a/services/graph/pkg/service/v0/tags.go
+++ b/services/graph/pkg/service/v0/tags.go
@@ -86,6 +86,9 @@ func (g Graph) AssignTags(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	// use resource id from stat response to work on the actual resource and not a share jail item
+	rid = *sres.GetInfo().GetId()
+
 	pm := sres.GetInfo().GetPermissionSet()
 	if pm == nil {
 		g.logger.Error().Err(err).Msg("no permissionset on file")
@@ -185,6 +188,9 @@ func (g Graph) UnassignTags(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
+	// use resource id from stat response to work on the actual resource and not a share jail item
+	rid = *sres.GetInfo().GetId()
+
 	pm := sres.GetInfo().GetPermissionSet()
 	if pm == nil {
 		g.logger.Error().Err(err).Msg("no permissionset on file")