diff --git a/project.config b/project.config
index 4470a56..90eb009 100644
--- a/project.config
+++ b/project.config
@@ -15,6 +15,9 @@
 [access "refs/*"]
 	read = group Anonymous Users
 	read = group mdb/cuelang-repo
+	forgeAuthor = group mdb/copybara-git-writers
+	forgeCommitter = group mdb/copybara-git-writers
+	push = group mdb/copybara-git-writers
 [access "refs/for/*"]
 	addPatchSet = group Registered Users
 [access "refs/for/refs/*"]