Manipulating system tags

Is there a way for the admin to remove/add tags on any files (including files s/he does not own)? Can it be done through occ?, or is the only way to do it currently is to directly modify the systemtag mapping table?