diff --git a/gerrit/acls/openstack/puppet-mistral.config b/gerrit/acls/openstack/puppet-mistral.config
index c8bab81713..5507f0335c 100644
--- a/gerrit/acls/openstack/puppet-mistral.config
+++ b/gerrit/acls/openstack/puppet-mistral.config
@@ -1,14 +1,14 @@
 [access "refs/heads/*"]
 abandon = group puppet-manager-core
 abandon = group puppet-mistral-core
+create = group puppet-manager-release
 label-Code-Review = -2..+2 group puppet-manager-core
 label-Code-Review = -2..+2 group puppet-mistral-core
 label-Workflow = -1..+1 group puppet-manager-core
 label-Workflow = -1..+1 group puppet-mistral-core
 
 [access "refs/tags/*"]
-pushSignedTag = group puppet-manager-core
-pushSignedTag = group puppet-mistral-release
+pushSignedTag = group puppet-manager-release
 
 [receive]
 requireChangeId = true
diff --git a/gerrit/acls/openstack/puppet-modules.config b/gerrit/acls/openstack/puppet-modules.config
index 8c4a338190..6004bc343b 100644
--- a/gerrit/acls/openstack/puppet-modules.config
+++ b/gerrit/acls/openstack/puppet-modules.config
@@ -1,11 +1,11 @@
 [access "refs/heads/*"]
 abandon = group puppet-manager-core
-create = group puppet-manager-core
+create = group puppet-manager-release
 label-Code-Review = -2..+2 group puppet-manager-core
 label-Workflow = -1..+1 group puppet-manager-core
 
 [access "refs/tags/*"]
-pushSignedTag = group puppet-manager-core
+pushSignedTag = group puppet-manager-release
 
 [receive]
 requireChangeId = true
diff --git a/gerrit/acls/openstack/puppet-monasca.config b/gerrit/acls/openstack/puppet-monasca.config
index 64f57be9ec..83bb5f0e77 100644
--- a/gerrit/acls/openstack/puppet-monasca.config
+++ b/gerrit/acls/openstack/puppet-monasca.config
@@ -1,14 +1,14 @@
 [access "refs/heads/*"]
 abandon = group puppet-manager-core
 abandon = group puppet-monasca-core
+create = group puppet-manager-release
 label-Code-Review = -2..+2 group puppet-manager-core
 label-Code-Review = -2..+2 group puppet-monasca-core
 label-Workflow = -1..+1 group puppet-manager-core
 label-Workflow = -1..+1 group puppet-monasca-core
 
 [access "refs/tags/*"]
-pushSignedTag = group puppet-manager-core
-pushSignedTag = group puppet-monasca-release
+pushSignedTag = group puppet-manager-release
 
 [receive]
 requireChangeId = true
diff --git a/gerrit/acls/openstack/puppet-murano.config b/gerrit/acls/openstack/puppet-murano.config
index 31b7a55e8b..b888f1b69e 100644
--- a/gerrit/acls/openstack/puppet-murano.config
+++ b/gerrit/acls/openstack/puppet-murano.config
@@ -1,10 +1,11 @@
 [access "refs/heads/*"]
 abandon = group puppet-murano-core
+create = group puppet-manager-release
 label-Code-Review = -2..+2 group puppet-murano-core
 label-Workflow = -1..+1 group puppet-murano-core
 
 [access "refs/tags/*"]
-pushSignedTag = group puppet-murano-release
+pushSignedTag = group puppet-manager-release
 
 [receive]
 requireChangeId = true
diff --git a/gerrit/acls/openstack/puppet-tripleo.config b/gerrit/acls/openstack/puppet-tripleo.config
index 5a1c4cff2f..c8d6d76413 100644
--- a/gerrit/acls/openstack/puppet-tripleo.config
+++ b/gerrit/acls/openstack/puppet-tripleo.config
@@ -1,7 +1,7 @@
 [access "refs/heads/*"]
 abandon = group puppet-manager-core
 abandon = group tripleo-core
-create = group puppet-manager-core
+create = group puppet-manager-release
 create = group tripleo-core
 label-Code-Review = -2..+2 group puppet-manager-core
 label-Code-Review = -2..+2 group tripleo-core
@@ -9,7 +9,7 @@ label-Workflow = -1..+1 group puppet-manager-core
 label-Workflow = -1..+1 group tripleo-core
 
 [access "refs/tags/*"]
-pushSignedTag = group puppet-manager-core
+pushSignedTag = group puppet-manager-release
 pushSignedTag = group tripleo-core
 
 [receive]