diff --git a/gerrit/acls/openstack/pbrx.config b/gerrit/acls/openstack/pbrx.config
index 8c24139f13..a1152d8964 100644
--- a/gerrit/acls/openstack/pbrx.config
+++ b/gerrit/acls/openstack/pbrx.config
@@ -3,6 +3,9 @@ abandon = group pbrx-core
 label-Code-Review = -2..+2 group pbrx-core
 label-Workflow = -1..+1 group pbrx-core
 
+[access "refs/tags/*"]
+pushSignedTag = group pbrx-release
+
 [receive]
 requireChangeId = true
 requireContributorAgreement = true