diff --git a/groups b/groups
new file mode 100644
index 0000000..2e44398
--- /dev/null
+++ b/groups
@@ -0,0 +1,4 @@
+# UUID                                  	Group Name
+#
+2b2dd3e6aa168df4d37183343cca116784e4fae0	infrastructure-approvers
+3c602ebb948eaf2077cc2eb062eb1a3b0367d759	Non-Interactive Users
diff --git a/project.config b/project.config
index e080951..0e92c28 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,8 @@
 	inheritFrom = All-Projects
 [submit]
 	action = rebase if necessary
+[access "refs/heads/*"]
+	push = group infrastructure-approvers
+	label-Code-Review = -2..+2 group infrastructure-approvers
+	label-Code-Review = -1..+1 group Non-Interactive Users
+	submit = group infrastructure-approvers