diff --git a/project.config b/project.config
index a2353b5..26e5a91 100644
--- a/project.config
+++ b/project.config
@@ -4,7 +4,6 @@
 	action = rebase if necessary
 [access "refs/*"]
 	read = group Non-Interactive Users
-	label-Allow-CI = +0..+1 group trusted-firmware-a-approvers
 [access "refs/heads/*"]
 	create = group trusted-firmware-a-approvers
 	forgeAuthor = group trusted-firmware-a-approvers
@@ -17,6 +16,7 @@
 	label-IP-Review = -1..+1 group trusted-firmware-a-ip-reviewers
 	label-Verified = -1..+1 group Bot Users
 	label-Verified = -1..+1 group trusted-firmware-a-approvers
+	label-Allow-CI = +0..+1 group trusted-firmware-a-approvers
 [access "refs/tags/*"]
 	create = group trusted-firmware-a-approvers
 	createTag = group trusted-firmware-a-approvers