diff --git a/modules/openstack_project/files/gerrit/acls/openstack/governance.config b/modules/openstack_project/files/gerrit/acls/openstack/governance.config
index 63e2821e62..1efdb135ab 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack/governance.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack/governance.config
@@ -1,5 +1,7 @@
 [access "refs/heads/*"]
-        label-Code-Review = -2..+2 group tech-committee
+        exclusiveGroupPermissions = label-Code-Review label-Approved
+        label-Code-Review = -1..+1 group tech-committee
+        label-Code-Review = -1..+2 group tech-committee-chair
         label-Approved = +0..+1 group tech-committee-chair
         workInProgress = group tech-committee
 [access "refs/tags/*"]