diff --git a/modules/openstack_project/files/gerrit/acls/stackforge/libra.config b/modules/openstack_project/files/gerrit/acls/stackforge/libra.config
index 307b37d9a9..044d3a6897 100644
--- a/modules/openstack_project/files/gerrit/acls/stackforge/libra.config
+++ b/modules/openstack_project/files/gerrit/acls/stackforge/libra.config
@@ -3,6 +3,11 @@
 [access "refs/heads/*"]
         label-Code-Review = -2..+2 group libra-core
         label-Approved = +0..+1 group libra-core
+        workInProgress = group libra-core
+        create = group libra-core
+[access "refs/tags/*"]
+        create = group libra-core
+        pushTag = group libra-core
 [receive]
         requireChangeId = true
         requireContributorAgreement = true