diff --git a/project.config b/project.config
index f2166a3..b0cc7e3 100644
--- a/project.config
+++ b/project.config
@@ -21,3 +21,6 @@
       defaultValue = 0
 	copyCondition = changekind:NO_CHANGE OR changekind:NO_CODE_CHANGE
 
+[access "refs/tags/*"]
+	createSignedTag = group hafnium-approvers
+	createTag = group hafnium-approvers