diff --git a/groups b/groups
index 54a9d15..30de881 100644
--- a/groups
+++ b/groups
@@ -4,4 +4,5 @@
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
+mdb:copybara-git-readers                	mdb/copybara-git-readers
 mdb:cuelang-repo                        	mdb/cuelang-repo
diff --git a/project.config b/project.config
index 4883979..e2027f8 100644
--- a/project.config
+++ b/project.config
@@ -10,6 +10,7 @@
 	action = cherry pick
 [capability]
 	administrateServer = group mdb/cuelang-repo
+	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
 [access "refs/*"]
 	read = group Anonymous Users
 	read = group mdb/cuelang-repo