diff --git a/gerrit/acls/openstack/ansible-config_template.config b/gerrit/acls/openstack/ansible-config_template.config
deleted file mode 100644
index 35d7c09e59..0000000000
--- a/gerrit/acls/openstack/ansible-config_template.config
+++ /dev/null
@@ -1,17 +0,0 @@
-[access]
-inheritFrom = openstack/meta-config
-
-[access "refs/heads/*"]
-abandon = group ansible-config_template-core
-abandon = group openstack-ansible-core
-label-Code-Review = -2..+2 group ansible-config_template-core
-label-Code-Review = -2..+2 group openstack-ansible-core
-label-Workflow = -1..+1 group ansible-config_template-core
-label-Workflow = -1..+1 group openstack-ansible-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/ansible-role-python_venv_build.config b/gerrit/acls/openstack/ansible-role-python_venv_build.config
deleted file mode 100644
index 8da438157e..0000000000
--- a/gerrit/acls/openstack/ansible-role-python_venv_build.config
+++ /dev/null
@@ -1,17 +0,0 @@
-[access]
-inheritFrom = openstack/meta-config
-
-[access "refs/heads/*"]
-abandon = group ansible-role-python_venv_build-core
-abandon = group openstack-ansible-core
-label-Code-Review = -2..+2 group ansible-role-python_venv_build-core
-label-Code-Review = -2..+2 group openstack-ansible-core
-label-Workflow = -1..+1 group ansible-role-python_venv_build-core
-label-Workflow = -1..+1 group openstack-ansible-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/ansible-role-qdrouterd.config b/gerrit/acls/openstack/ansible-role-qdrouterd.config
deleted file mode 100644
index 8fea46e210..0000000000
--- a/gerrit/acls/openstack/ansible-role-qdrouterd.config
+++ /dev/null
@@ -1,17 +0,0 @@
-[access]
-inheritFrom = openstack/meta-config
-
-[access "refs/heads/*"]
-abandon = group ansible-role-qdrouterd-core
-abandon = group openstack-ansible-core
-label-Code-Review = -2..+2 group ansible-role-qdrouterd-core
-label-Code-Review = -2..+2 group openstack-ansible-core
-label-Workflow = -1..+1 group ansible-role-qdrouterd-core
-label-Workflow = -1..+1 group openstack-ansible-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/ansible-role-systemd_mount.config b/gerrit/acls/openstack/ansible-role-systemd_mount.config
deleted file mode 100644
index 56ad60f439..0000000000
--- a/gerrit/acls/openstack/ansible-role-systemd_mount.config
+++ /dev/null
@@ -1,17 +0,0 @@
-[access]
-inheritFrom = openstack/meta-config
-
-[access "refs/heads/*"]
-abandon = group ansible-role-systemd_mount-core
-abandon = group openstack-ansible-core
-label-Code-Review = -2..+2 group ansible-role-systemd_mount-core
-label-Code-Review = -2..+2 group openstack-ansible-core
-label-Workflow = -1..+1 group ansible-role-systemd_mount-core
-label-Workflow = -1..+1 group openstack-ansible-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/ansible-role-systemd_networkd.config b/gerrit/acls/openstack/ansible-role-systemd_networkd.config
deleted file mode 100644
index 4aa74a90fb..0000000000
--- a/gerrit/acls/openstack/ansible-role-systemd_networkd.config
+++ /dev/null
@@ -1,17 +0,0 @@
-[access]
-inheritFrom = openstack/meta-config
-
-[access "refs/heads/*"]
-abandon = group ansible-role-systemd_networkd-core
-abandon = group openstack-ansible-core
-label-Code-Review = -2..+2 group ansible-role-systemd_networkd-core
-label-Code-Review = -2..+2 group openstack-ansible-core
-label-Workflow = -1..+1 group ansible-role-systemd_networkd-core
-label-Workflow = -1..+1 group openstack-ansible-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/acls/openstack/ansible-role-systemd_service.config b/gerrit/acls/openstack/ansible-role-systemd_service.config
deleted file mode 100644
index ca3c7c0b38..0000000000
--- a/gerrit/acls/openstack/ansible-role-systemd_service.config
+++ /dev/null
@@ -1,17 +0,0 @@
-[access]
-inheritFrom = openstack/meta-config
-
-[access "refs/heads/*"]
-abandon = group ansible-role-systemd_service-core
-abandon = group openstack-ansible-core
-label-Code-Review = -2..+2 group ansible-role-systemd_service-core
-label-Code-Review = -2..+2 group openstack-ansible-core
-label-Workflow = -1..+1 group ansible-role-systemd_service-core
-label-Workflow = -1..+1 group openstack-ansible-core
-
-[receive]
-requireChangeId = true
-requireContributorAgreement = true
-
-[submit]
-mergeContent = true
diff --git a/gerrit/projects.yaml b/gerrit/projects.yaml
index 680e5185fc..ac0ed5354e 100644
--- a/gerrit/projects.yaml
+++ b/gerrit/projects.yaml
@@ -934,6 +934,7 @@
   description: Ansible action plugin to template arbitrary json ini yaml data
   groups:
     - openstack-ansible
+  acl-config: /home/gerrit2/acls/openstack/openstack-ansible-roles.config
   docimpact-group: openstack-ansible
 - project: openstack/ansible-hardening
   description: Ansible role for security hardening
@@ -1015,11 +1016,13 @@
   groups:
     - openstack-ansible
   docimpact-group: openstack-ansible
+  acl-config: /home/gerrit2/acls/openstack/openstack-ansible-roles.config
 - project: openstack/ansible-role-qdrouterd
   description: Ansible role to deploy qpid dispatch router
   groups:
     - openstack-ansible
   docimpact-group: openstack-ansible
+  acl-config: /home/gerrit2/acls/openstack/openstack-ansible-roles.config
 - project: openstack/ansible-role-redhat-subscription
   description: Ansible role to configure Red Hat Subscription Management
 - project: openstack/ansible-role-systemd_mount
@@ -1027,16 +1030,19 @@
   groups:
     - openstack-ansible
   docimpact-group: openstack-ansible
+  acl-config: /home/gerrit2/acls/openstack/openstack-ansible-roles.config
 - project: openstack/ansible-role-systemd_networkd
   description: Ansible role to manage systemd networkd
   groups:
     - openstack-ansible
   docimpact-group: openstack-ansible
+  acl-config: /home/gerrit2/acls/openstack/openstack-ansible-roles.config
 - project: openstack/ansible-role-systemd_service
   description: Ansible role to manage systemd services
   groups:
     - openstack-ansible
   docimpact-group: openstack-ansible
+  acl-config: /home/gerrit2/acls/openstack/openstack-ansible-roles.config
 - project: openstack/ansible-role-thales-hsm
   description: Ansible role to manage Thales Hardware Security Module (HSM) client
     software