diff --git a/groups b/groups
index 0c1a483..5a5332d 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,9 @@
 # UUID                                  	Group Name
 #
 74a4e7cc6afdd426825c80f5bafa4ab56ee19b10	SLSA Policy Verification Service Accounts
+c82bf82acc5857559f296fbed3afe232ede80b24	autoupdate-service-accounts
+ecb4832172a395d8ccdff583fcf7c53abfea4de5	autoupdate-onboarding-service-accounts
+f6984802839b33398c57f0f4dbccf16bfc5e590d	autoupdate-vigil-service-accounts
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
diff --git a/project.config b/project.config
index e5a996f..5a80ee9 100644
--- a/project.config
+++ b/project.config
@@ -34,13 +34,20 @@
 	label-Code-Review = -2..+2 group mdb/quiche-dev-git-admin
 	label-Code-Review = -1..+1 group Registered Users
 	push = +force group Project Owners
+	push = group autoupdate-service-accounts
+	push = group autoupdate-vigil-service-accounts
 	push = group mdb/copybara-git-writers
 	submit = group Project Owners
+	submit = group autoupdate-service-accounts
+	submit = group autoupdate-vigil-service-accounts
 	submit = group mdb/quiche-dev
 	submit = group mdb/quiche-dev-git-admin
 	addPatchSet = group mdb/quiche-dev-git-admin
 	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
 	Read = group SLSA Policy Verification Service Accounts
+	Read = group autoupdate-onboarding-service-accounts
+	Read = group autoupdate-service-accounts
+	Read = group autoupdate-vigil-service-accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	create = group Project Owners
@@ -86,4 +93,7 @@
 [capability]
 	administrateServer = group mdb/quiche-dev-git-admin
 	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
+	viewAllAccounts = group autoupdate-onboarding-service-accounts
+	viewAllAccounts = group autoupdate-service-accounts
+	viewAllAccounts = group autoupdate-vigil-service-accounts
 	viewAllAccounts = group mdb/copybara-git-readers