diff --git a/groups b/groups
index 37bc387..3240ed3 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,7 @@
 # UUID                                                        	Group Name
 #
 2edc94188dd0f1e72e027eb20a2fc3006e7d39ba                      	gerrit-ci
+671383eaf869183cac42a3b69a4c1d19ee39f98a                      	gerrit-blocked-users
 b49f61711e6c0148f9f4d90702015bb894289be9                      	gerrit-verifiers
 e076e6ae9e389d476b0dcf1427cca2dcda4f77c6                      	Diffy Cuckoo
 global:Anonymous-Users                                        	Anonymous Users
diff --git a/project.config b/project.config
index 89f94c4..6f1abbe 100644
--- a/project.config
+++ b/project.config
@@ -10,6 +10,7 @@
 	default = refs/meta/dashboards/default:recent
 [access "refs/*"]
 	read = group Anonymous Users
+	read = block group gerrit-blocked-users
 	owner = group google/gerritcodereview-maintainers@googlegroups.com
 [access "refs/for/refs/heads/*"]
 	push = group Registered Users
@@ -44,6 +45,6 @@
 	pushMerge = group Project Owners
 	pushMerge = group google/gerritcodereview-maintainers@googlegroups.com
 [access "refs/for/*"]
-	addPatchSet = group google/gerritcodereview-maintainers@googlegroups.com
 	addPatchSet = group gerrit-verifiers
+	addPatchSet = group google/gerritcodereview-maintainers@googlegroups.com
 	addPatchSet = block group Anonymous Users