Tagging instances/tenants with department

I’m wondering what the recommended way to automate tagging instances and tenants within OpenStack cloud providers is.

The provisioning of tenants and instances is not currently being accomplished through ManageIQ. So the tagging needs to be done outside of provisioning. The tag is intended to specify a department name that already exists from LDAP integration.

Any input would be helpful.