Modify access rules

groups

diff --git a/groups b/groups
index 8859adf..9194cd7 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,7 @@
 # UUID                                  	Group Name
 #
 10f1f90b56e5c67fe3754f0e79a11078d3be27f7	Approvers
+eac29dd93c6a9726e9744c4ad1453d4788f21717	Admins
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users

project.config

diff --git a/project.config b/project.config
index 4588d27..a8c8505 100644
--- a/project.config
+++ b/project.config
@@ -9,6 +9,7 @@
 	mergeContent = true
 	action = cherry pick
 [capability]
+	administrateServer = group Admins
 	administrateServer = group mdb/cuelang-repo
 	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
 	viewAllAccounts = group mdb/copybara-git-readers
@@ -24,45 +25,59 @@
 	push = group Registered Users
 	pushMerge = group Registered Users
 [access "refs/heads/*"]
+	create = group Admins
 	create = group Project Owners
 	create = group mdb/cuelang-repo
+	editTopicName = +force group Admins
 	editTopicName = +force group Project Owners
 	editTopicName = +force group mdb/cuelang-repo
 	forgeAuthor = group Registered Users
 	forgeAuthor = group mdb/copybara-git-writers
+	forgeCommitter = group Admins
 	forgeCommitter = group Project Owners
 	forgeCommitter = group mdb/copybara-git-writers
 	forgeCommitter = group mdb/cuelang-repo
+	label-Code-Review = -2..+2 group Admins
 	label-Code-Review = -2..+2 group Approvers
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -2..+2 group mdb/cuelang-repo
 	label-Code-Review = -1..+1 group Registered Users
+	push = group Admins
 	push = group Project Owners
 	push = group mdb/copybara-git-writers
 	push = group mdb/cuelang-repo
+	submit = group Admins
 	submit = group Project Owners
 	submit = group mdb/cuelang-repo
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
+	create = group Admins
 	create = group Project Owners
 	create = group mdb/cuelang-repo
 	label-Code-Review = -2..+2 group Approvers
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -2..+2 group mdb/cuelang-repo
+	push = group Admins
 	push = group Project Owners
 	push = group mdb/cuelang-repo
+	read = group Admins
 	read = group Project Owners
 	read = group mdb/cuelang-repo
+	submit = group Admins
 	submit = group Approvers
 	submit = group Project Owners
 	submit = group mdb/cuelang-repo
 [access "refs/tags/*"]
+	create = group Admins
 	create = group Project Owners
 	create = group mdb/cuelang-repo
+	createSignedTag = group Admins
 	createSignedTag = group Project Owners
 	createSignedTag = group mdb/cuelang-repo
+	createTag = group Admins
 	createTag = group Project Owners
 	createTag = group mdb/cuelang-repo
+	forgeCommitter = group Admins
 	forgeCommitter = group Project Owners
 	forgeCommitter = group mdb/cuelang-repo
 [label "Code-Review"]