diff --git a/groups b/groups
index 76e1772..7ba3105 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,6 @@
 # UUID                                  	Group Name
 #
+742a5e6f04f58082ca5c4f7a459632bdfb87a17c	Approvers
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
diff --git a/project.config b/project.config
index 545d1c9..33cad10 100644
--- a/project.config
+++ b/project.config
@@ -1,16 +1,20 @@
 [project]
-	state = active
 [receive]
 	requireContributorAgreement = true
 [access "refs/for/refs/heads/*"]
 	push = group Registered Users
 	pushMerge = group Registered Users
 [access "refs/heads/*"]
+	create = group Approvers
 	create = group Project Owners
+	forgeAuthor = group Approvers
 	forgeAuthor = group Registered Users
+	label-Code-Review = -2..+2 group Approvers
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -1..+1 group Registered Users
+	label-Verified = -1..+1 group Approvers
 	label-Verified = -1..+1 group Project Owners
+	submit = group Approvers
 	submit = group Project Owners
 [access "refs/*"]
 	read = group Anonymous Users