diff --git a/gerrit/acls/openstack-infra/ciwatch.config b/gerrit/acls/openstack-infra/ciwatch.config
index 7d70f230bb..a3a08ab646 100644
--- a/gerrit/acls/openstack-infra/ciwatch.config
+++ b/gerrit/acls/openstack-infra/ciwatch.config
@@ -1,3 +1,6 @@
+[access "refs/for/refs/*"]
+pushMerge = group ciwatch-release
+
 [access "refs/heads/*"]
 abandon = group ciwatch-core
 create = group ciwatch-release