diff --git a/modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config b/modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config
index c4ed793c0f..558c912030 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack/designate-specs.config
@@ -3,9 +3,6 @@ abandon = group designate-core
 label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
-[access "refs/tags/*"]
-pushSignedTag = group designate-milestone
-
 [receive]
 requireChangeId = true
 requireContributorAgreement = true
diff --git a/modules/openstack_project/files/gerrit/acls/openstack/designate.config b/modules/openstack_project/files/gerrit/acls/openstack/designate.config
index 7f48430b0e..41643729fb 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack/designate.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack/designate.config
@@ -3,24 +3,16 @@ abandon = group designate-core
 label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
-[access "refs/heads/proposed/*"]
-abandon = group designate-milestone
-create = group designate-milestone
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group designate-milestone
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+1 group designate-milestone
-
 [access "refs/heads/stable/*"]
-abandon = group designate-milestone
-create = group designate-milestone
-exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
-label-Code-Review = -2..+2 group designate-milestone
-label-Code-Review = -1..+1 group Registered Users
-label-Workflow = -1..+1 group designate-milestone
+create = group designate-ptl
+label-Code-Review = -2..+2 group openstack-stable-maint
+label-Workflow = -1..+1 group openstack-stable-maint
 
-[access "refs/tags/*"]
-pushSignedTag = group designate-milestone
+[access "refs/heads/proposed/*"]
+exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+abandon = group designate-milestone
+label-Code-Review = -2..+2 group designate-milestone
+label-Workflow = -1..+1 group designate-milestone
 
 [receive]
 requireChangeId = true
diff --git a/modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config b/modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config
index c4ed793c0f..b5b298ecde 100644
--- a/modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config
+++ b/modules/openstack_project/files/gerrit/acls/openstack/python-designateclient.config
@@ -4,7 +4,7 @@ label-Code-Review = -2..+2 group designate-core
 label-Workflow = -1..+1 group designate-core
 
 [access "refs/tags/*"]
-pushSignedTag = group designate-milestone
+pushSignedTag = group designate-ptl
 
 [receive]
 requireChangeId = true