diff --git a/groups b/groups
index a9b2c64..2ce05ef 100644
--- a/groups
+++ b/groups
@@ -5,6 +5,7 @@
 863f2dbbc4f4bee592826bd5d5d111f4d71bc654                      	Toggle WIP
 8fba5c67cef14f54732887f0ed5275874f63b0c1                      	Nobody
 c3c8c8fb7ed0cdd572a8c96f36398cc04f40bad5                      	Google Tools
+cb61475143ce9ced506267034d8df3c364d68284                      	Gerrit Flows
 f7db30a3f0ff326e3c86b9c76703f7a29d69e51c                      	Googlers
 global:Anonymous-Users                                        	Anonymous Users
 global:Project-Owners                                         	Project Owners
diff --git a/project.config b/project.config
index 4f67002..fb98ee1 100644
--- a/project.config
+++ b/project.config
@@ -88,6 +88,8 @@
 	accepted = group mdb/google-cla-gerrit-robot-accounts
 [capability]
 	administrateServer = group Administrators
+	runAs = group Gerrit Flows
+	viewAllAccounts = group Gerrit Flows
 	viewAllAccounts = group Tagging Hat
 [plugin "jwtservice"]
 	audience = https://api.cr.dev