diff --git a/groups b/groups
index ec36e2f..f699db5 100644
--- a/groups
+++ b/groups
@@ -6,3 +6,4 @@
 5b2667831f42b0a9032405404b813c6082876d90	trusted-firmware-a-approvers
 7c05eb1a9b6d175b7b553af378f380423ff922e4	Bot Users
 8c8d5800e19a926629aefdd27673521578b2a37d	trusted-firmware-a-branch-users
+user:ci-bot-user                        	user/TrustedFirmware Code Review (ci-bot-user)
diff --git a/project.config b/project.config
index a5b6056..7e6e6a7 100644
--- a/project.config
+++ b/project.config
@@ -67,3 +67,5 @@
 	push = group trusted-firmware-a-branch-users
 	pushMerge = group trusted-firmware-a-branch-users
 	forgeCommitter = group trusted-firmware-a-branch-users
+[access "refs/heads/master"]
+	push = group user/TrustedFirmware Code Review (ci-bot-user)