Modify access rules
diff --git a/groups b/groups
index 9c98aaf..a67c54c 100644
--- a/groups
+++ b/groups
@@ -1,3 +1,5 @@
 # UUID                                  	Group Name
 #
 4153773b680635a73b9965cb3b29e0b631e5215c	tf-rmm-approvers
+7c05eb1a9b6d175b7b553af378f380423ff922e4	Bot Users
+global:Registered-Users                 	Registered Users
diff --git a/project.config b/project.config
index 2ed8095..ae1274f 100644
--- a/project.config
+++ b/project.config
@@ -6,3 +6,15 @@
 	owner = group tf-rmm-approvers
 [project]
 	description = Gerrit settings common to repositories under the TF-RMM namespace
+[access "refs/heads/*"]
+	abandon = group tf-rmm-approvers
+	create = group tf-rmm-approvers
+	forgeAuthor = group tf-rmm-approvers
+	forgeServerAsCommitter = group tf-rmm-approvers
+	label-Allow-CI = +0..+2 group tf-rmm-approvers
+	label-Code-Review = -1..+1 group Registered Users
+	label-Maintainer-Review = -1..+1 group tf-rmm-approvers
+	label-Verified = -1..+1 group Bot Users
+	label-Verified = -1..+1 group tf-rmm-approvers
+	push = +force group tf-rmm-approvers
+	submit = group tf-rmm-approvers