diff --git a/groups b/groups
index 941be5a..c0c7c28 100644
--- a/groups
+++ b/groups
@@ -3,6 +3,8 @@
 090e2829b3a2ff324d5c288f4c7bb82d3389fa8e	owners-override
 5bfa1e6d0fc0cd988605571affca89e60a7aa1a1	bot-commit-bots
 b8e19f14ecb618ea6c5d3dca892a7d80105ed6af	gerrit-submit-requirements-admins
+d88594eff8d639cb82d00cdda77f3ec69a8463a0	dawn-scoped@luci-project-accounts.iam.gserviceaccount.com
+e8a7a6ec5578b7b3fb664b063b34b1278f7409e2	tint-scoped@luci-project-accounts.iam.gserviceaccount.com
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
 global:Registered-Users                 	Registered Users
diff --git a/project.config b/project.config
index 423fd85..5f675c5 100644
--- a/project.config
+++ b/project.config
@@ -96,6 +96,7 @@
 	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
 	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
 	gerrit-google-manageUsersGet = group mdb/copybara-git-readers
+	viewAllAccounts = group dawn-scoped@luci-project-accounts.iam.gserviceaccount.com
 	viewAllAccounts = group mdb/copybara-git-readers
 	viewAllAccounts = group mdb/copybara-git-readers
 	viewAllAccounts = group mdb/copybara-git-readers
@@ -103,10 +104,11 @@
 	viewAllAccounts = group mdb/copybara-git-readers
 	viewAllAccounts = group mdb/copybara-git-readers
 	viewAllAccounts = group mdb/copybara-git-readers
+	viewAllAccounts = group tint-scoped@luci-project-accounts.iam.gserviceaccount.com
+[plugin "jwtservice"]
+	audience = https://api.cr.dev
 [submit-requirement "Code-Review"]
 	description = At least one maximum vote for label 'Code-Review' is required
 	submittableIf = label:Code-Review=MAX,user=non_uploader AND -label:Code-Review=MIN
 	overrideIf = label:Bot-Commit=+1 AND -label:Code-Review=MIN
 	canOverrideInChildProjects = true
-[plugin "jwtservice"]
-  audience = https://api.cr.dev