diff --git a/groups b/groups
new file mode 100644
index 0000000..596211b
--- /dev/null
+++ b/groups
@@ -0,0 +1,4 @@
+# UUID                 	Group Name
+#
+global:Anonymous-Users 	Anonymous Users
+global:Registered-Users	Registered Users
diff --git a/project.config b/project.config
index e080951..6f4a902 100644
--- a/project.config
+++ b/project.config
@@ -2,3 +2,11 @@
 	inheritFrom = All-Projects
 [submit]
 	action = rebase if necessary
+[access "refs/*"]
+	read = group Anonymous Users
+	read = group Registered Users
+[access "refs/for/*"]
+	push = group Registered Users
+[access "refs/heads/*"]
+	label-Code-Review = -1..+1 group Registered Users
+	label-Verified = +0..+1 group Registered Users