diff --git a/project.config b/project.config
index 5fe5fe3..574088c 100644
--- a/project.config
+++ b/project.config
@@ -5,6 +5,8 @@
 [access "refs/for/*"]
 	push = group trusted-firmware-staging-approvers
 	create = group trusted-firmware-staging-approvers
+	submit = group trusted-firmware-staging-approvers
 [access "refs/tags/*"]
 	create = group trusted-firmware-staging-approvers
 	push = group trusted-firmware-staging-approvers
+	submit = group trusted-firmware-staging-approvers