diff --git a/groups b/groups
index adc75cd..5788ea0 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,6 @@
 # UUID                                                        	Group Name
 #
+986680d4bdf8f3c033b4afc51a3442ceb42e5265                      	Service Users
 fe9ab695b0f1bfc7ac977b928b0971c565803635                      	Public-Contributors
 ff1e0831ffcb2893f59df02deaf66e61397d5560                      	plus2
 global:Anonymous-Users                                        	Anonymous Users
diff --git a/project.config b/project.config
index 1a680c4..95c3611 100644
--- a/project.config
+++ b/project.config
@@ -14,6 +14,7 @@
 	revert = group mdb/r8-team
 [access "refs/for/*"]
 	addPatchSet = group Public-Contributors
+	addPatchSet = group Service Users
 	addPatchSet = group mdb/r8-team
 	addPatchSet = group plus2
 	push = group Public-Contributors
@@ -44,9 +45,12 @@
 	label-Code-Review = -2..+2 group mdb/kotlin-compiler-team
 	label-Code-Review = -2..+2 group mdb/r8-team
 	label-Code-Review = -2..+1 group plus2
+	label-Commit-Queue = +0..+2 group Service Users
 	label-Commit-Queue = +0..+2 group mdb/r8-team
+	label-Auto-Submit = +0..+1 group Service Users
 	label-Auto-Submit = +0..+1 group mdb/r8-team
 	submit = group Project Owners
+	submit = group Service Users
 	submit = group mdb/gmscore-size
 	submit = group mdb/kotlin-compiler-team
 	submit = group mdb/r8-team
@@ -113,6 +117,7 @@
 [capability]
 	administrateServer = group mdb/gmscore-size
 	administrateServer = group mdb/r8-team
+	viewAllAccounts = group Service Users
 	viewAllAccounts = group mdb/clstats-dashboard-dev
 [plugin "jwtservice"]
 	audience = https://api.cr.dev