diff --git a/groups b/groups
new file mode 100644
index 0000000..3cdafb2
--- /dev/null
+++ b/groups
@@ -0,0 +1,4 @@
+# UUID                                  	Group Name
+#
+global:Project-Owners                   	Project Owners
+global:Registered-Users                 	Registered Users
diff --git a/project.config b/project.config
index 5dc06cc..5aad39c 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,13 @@
 	state = active
 [receive]
 	requireContributorAgreement = true
+[access "refs/for/refs/heads/*"]
+	push = group Registered Users
+	pushMerge = group Registered Users
+[access "refs/heads/*"]
+	create = group Project Owners
+	forgeAuthor = group Registered Users
+	label-Code-Review = -2..+2 group Project Owners
+	label-Code-Review = -1..+1 group Registered Users
+	label-Verified = -1..+1 group Project Owners
+	submit = group Project Owners