Modify access rules
diff --git a/groups b/groups
new file mode 100644
index 0000000..9322d03
--- /dev/null
+++ b/groups
@@ -0,0 +1,4 @@
+# UUID                                  	Group Name
+#
+3c602ebb948eaf2077cc2eb062eb1a3b0367d759	Non-Interactive Users
+9a743b14faa1388c676074ead3e5bb5439f570ba	hafnium-approvers
diff --git a/project.config b/project.config
index e080951..d7b5ba7 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,12 @@
 	inheritFrom = All-Projects
 [submit]
 	action = rebase if necessary
+[access "refs/*"]
+	read = group Non-Interactive Users
+[access "refs/heads/*"]
+	abandon = group hafnium-approvers
+	create = group hafnium-approvers
+	label-Code-Review = -2..+2 group hafnium-approvers
+	label-Code-Review = -1..+1 group Non-Interactive Users
+	push = group hafnium-approvers
+	submit = group hafnium-approvers