Can CI_JOB_TOKEN be used to tag?

hello!

i’m looking for an easy one size fits all solution to tag repos… can CI_JOB_TOKEN be used to run a simple git tag command from CICD? i’m trying to create a tag from my .gitlab-ci.yml when i push to ‘main’ what access is needed exactly to tag the repo from that repos CICD?

thanks…