diff --git a/groups b/groups
index 75006af..3dae91c 100644
--- a/groups
+++ b/groups
@@ -16,5 +16,5 @@
 ldap:employees                                                	ldap/employees
 ldap:interns                                                  	ldap/interns
 mdb:copybara-git-readers                                      	mdb/copybara-git-readers
-mdb:gerritcodereview-sre                                      	mdb/gerritcodereview-sre
+mdb:golang-gob-eng-policy                                     	mdb/golang-gob-eng-policy
 mdb:golang-gob-owners                                         	mdb/golang-gob-owners
diff --git a/project.config b/project.config
index 7205e47..a5ef5d7 100644
--- a/project.config
+++ b/project.config
@@ -32,13 +32,12 @@
 	removeReviewer = group approvers
 	abandon = group may-abandon-changes
 [access "refs/meta/config"]
-	exclusiveGroupPermissions = read
+	exclusiveGroupPermissions = label-Code-Review push read submit
+	read = group mdb/golang-gob-eng-policy
 	read = group mdb/golang-gob-owners
 	push = group mdb/golang-gob-owners
 	label-Code-Review = -2..+2 group mdb/golang-gob-owners
 	submit = group mdb/golang-gob-owners
-	create = group mdb/gerritcodereview-sre
-	create = group mdb/golang-gob-owners
 [access "refs/tags/*"]
 	push = group release-managers
 	create = group release-managers