Modify access rules
diff --git a/project.config b/project.config
index c2bce90..e2f0e5c 100644
--- a/project.config
+++ b/project.config
@@ -12,3 +12,7 @@
 	label-Code-Review = -2..+2 group trusted-firmware-staging-approvers
 	push = +force group trusted-firmware-staging-approvers
 	submit = group trusted-firmware-staging-approvers
+[access "refs/tags/*"]
+	create = group trusted-firmware-staging-approvers
+	createSignedTag = group trusted-firmware-staging-approvers
+	createTag = group trusted-firmware-staging-approvers