Modify access rules
diff --git a/groups b/groups
index 0609c81..ea27dcc 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,7 @@
-# UUID                 	Group Name
+# UUID                  	Group Name
 #
-global:Anonymous-Users 	Anonymous Users
-global:Project-Owners  	Project Owners
-global:Registered-Users	Registered Users
-mdb:webgpu-dawn-admin  	mdb/webgpu-dawn-admin
+global:Anonymous-Users  	Anonymous Users
+global:Project-Owners   	Project Owners
+global:Registered-Users 	Registered Users
+mdb:copybara-git-readers	mdb/copybara-git-readers
+mdb:webgpu-dawn-admin   	mdb/webgpu-dawn-admin
diff --git a/project.config b/project.config
index 13d043d..f7df37a 100644
--- a/project.config
+++ b/project.config
@@ -62,3 +62,4 @@
 	value = +2 Looks good to me, approved
 [capability]
 	administrateServer = group mdb/webgpu-dawn-admin
+	gerrit-google-manageUsersGet = group mdb/copybara-git-readers