diff --git a/modules/openstack_project/files/gerrit/acls/openstack-infra/publications.config b/modules/openstack_project/files/gerrit/acls/openstack-infra/publications.config
index a909d60c4e..fdd6722c3f 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack-infra/publications.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack-infra/publications.config
@@ -2,6 +2,9 @@
         label-Code-Review = -2..+2 group openstack-ci-admins
         label-Approved = +0..+1 group openstack-ci-admins
         workInProgress = group openstack-ci-admins
+[access "refs/tags/*"]
+        create = group openstack-ci-admins
+        pushTag = group openstack-ci-admins
 [receive]
         requireChangeId = true
 [submit]