diff --git a/groups b/groups
index 0e0e7a2..d80f04a 100644
--- a/groups
+++ b/groups
@@ -5,5 +5,6 @@
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
+google:AI2Pq9r_ksT_hfUOny8swsG8krQwPL5eOM0hGHf4QWGOPdy9igqsdhs  google/google-union:signcla
 mdb:pigweed-gob-admin                   	mdb/pigweed-gob-admin
 mdb:pigweed-gob-admin-acl               	mdb/pigweed-gob-admin-acl
diff --git a/project.config b/project.config
index d0c7dbf..efddc1a 100644
--- a/project.config
+++ b/project.config
@@ -1,7 +1,7 @@
 [project]
 	description = Access inherited by all other projects.
 [receive]
-	requireContributorAgreement = false
+	requireContributorAgreement = true
 	requireSignedOffBy = false
 	requireChangeId = true
 	enableSignedPush = false
@@ -66,3 +66,9 @@
 	value = +2 Looks good to me, approved
 [capability]
 	administrateServer = group Administrators
+[accounts]
+    sameGroupVisibility = deny group google/google-union:signcla
+[contributor-agreement "Google CLA"]
+    description = Google Contributor License Agreement
+    agreementUrl = static/cla.html
+    accepted = group google/google-union:signcla