diff --git a/groups b/groups
new file mode 100644
index 0000000..9d65f3c
--- /dev/null
+++ b/groups
@@ -0,0 +1,3 @@
+# UUID                                  	Group Name
+#
+ab4eebf8425cd08bc5f95e015d51585d73d3a227	trusted-firmware-staging-approvers
diff --git a/project.config b/project.config
index e080951..e4e2f45 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,5 @@
 	inheritFrom = All-Projects
 [submit]
 	action = rebase if necessary
+[access "refs/for/*"]
+	push = group trusted-firmware-staging-approvers