diff --git a/groups b/groups
index 19df765..21df8c3 100644
--- a/groups
+++ b/groups
@@ -8,3 +8,4 @@
 8c8d5800e19a926629aefdd27673521578b2a37d	trusted-firmware-a-branch-users
 global:Registered-Users                 	Registered Users
 user:ci-bot-user                        	user/TrustedFirmware Code Review (ci-bot-user)
+user:openci-infra-admins                	user/ci-bot (openci-infra-admins)
diff --git a/project.config b/project.config
index 7a0c6e0..3fd948c 100644
--- a/project.config
+++ b/project.config
@@ -32,6 +32,7 @@
 
 	label-Allow-CI = +0..+2 group trusted-firmware-a-ci-users
 	label-Allow-CI = +0..+2 group user/TrustedFirmware Code Review (ci-bot-user)
+	label-Allow-CI = +0..+2 group user/ci-bot (openci-infra-admins)
 
 
 [access "refs/tags/*"]
@@ -105,6 +106,7 @@
 	forgeCommitter = group trusted-firmware-a-branch-users
 [access "refs/heads/master"]
 	push = group user/TrustedFirmware Code Review (ci-bot-user)
+	push = group user/ci-bot (openci-infra-admins)
 [access "refs/meta/config"]
 	read = group trusted-firmware-a-arm-approvers
 	create = group trusted-firmware-a-arm-approvers