diff --git a/gerrit/acls/openstack/ironic.config b/gerrit/acls/openstack/ironic.config
index 72c14ff166..432923a059 100644
--- a/gerrit/acls/openstack/ironic.config
+++ b/gerrit/acls/openstack/ironic.config
@@ -44,6 +44,19 @@
 	toggleWipState = group ironic-stable-maint
 	toggleWipState = group stable-maint-core
 
+[access "refs/heads/unmaintained/*"]
+	abandon = group Change Owner
+	abandon = group Project Bootstrappers
+	abandon = group Release Managers
+	abandon = group ironic-unmaintained-core
+	exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+	label-Code-Review = -2..+2 group Project Bootstrappers
+	label-Code-Review = -2..+2 group ironic-unmaintained-core
+	label-Code-Review = -1..+1 group Registered Users
+	label-Workflow = -1..+0 group Change Owner
+	label-Workflow = -1..+1 group Project Bootstrappers
+	label-Workflow = -1..+1 group ironic-unmaintained-core
+
 [access "refs/tags/*"]
 	createSignedTag = group ironic-release