Modify access rules
diff --git a/groups b/groups
new file mode 100644
index 0000000..9322d03
--- /dev/null
+++ b/groups
@@ -0,0 +1,4 @@
+# UUID Group Name
+#
+3c602ebb948eaf2077cc2eb062eb1a3b0367d759 Non-Interactive Users
+9a743b14faa1388c676074ead3e5bb5439f570ba hafnium-approvers
diff --git a/project.config b/project.config
index e080951..d7b5ba7 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,12 @@
inheritFrom = All-Projects
[submit]
action = rebase if necessary
+[access "refs/*"]
+ read = group Non-Interactive Users
+[access "refs/heads/*"]
+ abandon = group hafnium-approvers
+ create = group hafnium-approvers
+ label-Code-Review = -2..+2 group hafnium-approvers
+ label-Code-Review = -1..+1 group Non-Interactive Users
+ push = group hafnium-approvers
+ submit = group hafnium-approvers