diff --git a/gerrit/acls/x/tripleo-ipa.config b/gerrit/acls/x/tripleo-ipa.config
index 680c91fe8e..d48b9d2637 100644
--- a/gerrit/acls/x/tripleo-ipa.config
+++ b/gerrit/acls/x/tripleo-ipa.config
@@ -1,8 +1,12 @@
 [access "refs/heads/*"]
 abandon = group tripleo-ipa-core
+create = group tripleo-ipa-core
 label-Code-Review = -2..+2 group tripleo-ipa-core
 label-Workflow = -1..+1 group tripleo-ipa-core
 
+[access "refs/tags/*"]
+pushSignedTag = group tripleo-ipa-core
+
 [receive]
 requireChangeId = true