diff --git a/gerrit/acls/openstack/rally-openstack.config b/gerrit/acls/openstack/rally-openstack.config
index e6ed23b70b..b6b2711723 100644
--- a/gerrit/acls/openstack/rally-openstack.config
+++ b/gerrit/acls/openstack/rally-openstack.config
@@ -1,13 +1,9 @@
 [access "refs/heads/*"]
 abandon = group rally-openstack-core
-create = group rally-openstack-core
 label-Code-Review = -2..+2 group rally-openstack-core
 label-Verified = -1..+1 group rally-ci
 label-Workflow = -1..+1 group rally-openstack-core
 
-[access "refs/tags/*"]
-pushSignedTag = group rally-openstack-core
-
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/gerrit/acls/openstack/rally.config b/gerrit/acls/openstack/rally.config
index 0a48ed5283..48b9d0cddd 100644
--- a/gerrit/acls/openstack/rally.config
+++ b/gerrit/acls/openstack/rally.config
@@ -1,13 +1,9 @@
 [access "refs/heads/*"]
 abandon = group rally-core
-create = group rally-core
 label-Code-Review = -2..+2 group rally-core
 label-Verified = -1..+1 group rally-ci
 label-Workflow = -1..+1 group rally-core
 
-[access "refs/tags/*"]
-pushSignedTag = group rally-core
-
 [receive]
 requireChangeId = true
 requireContributorAgreement = true