diff --git a/project.config b/project.config
index e080951..1b6111d 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,17 @@
 	inheritFrom = All-Projects
 [submit]
 	action = rebase if necessary
+[access "refs/*"]
+	read = group Non-Interactive Users
+[access "refs/heads/*"]
+	create = group trusted-firmware-a-approvers
+	forgeAuthor = group trusted-firmware-a-approvers
+	forgeCommitter = group trusted-firmware-a-approvers
+	forgeServerAsCommitter = group trusted-firmware-a-approvers
+	push = group trusted-firmware-a-approvers
+	label-Code-Review = -2..+2 group trusted-firmware-a-approvers
+	submit = group trusted-firmware-a-approvers
+[access "refs/tags/*"]
+	create = group trusted-firmware-a-approvers
+	createTag = group trusted-firmware-a-approvers
+	createSignedTag = group trusted-firmware-a-approvers