diff --git a/modules/openstack_project/files/gerrit/acls/openstack/django_openstack_auth.config b/modules/openstack_project/files/gerrit/acls/openstack/django_openstack_auth.config
index f5a3700c46..1665787abd 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack/django_openstack_auth.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack/django_openstack_auth.config
@@ -4,6 +4,9 @@
 [access "refs/heads/milestone-proposed"]
         label-Code-Review = -2..+2 group horizon-milestone
         label-Approved = +0..+1 group horizon-milestone
+[access "refs/tags/*"]
+        create = group horizon-ptl
+        pushTag = group horizon-ptl
 [project]
         state = active
 [receive]