Set up access for GwsQ

Bug: 503353001
Change-Id: Id5c375b1621916b157f9210e3364c01eb7cb0e78
Reviewed-on: https://boringssl-review.googlesource.com/c/All-Projects/+/92867
Reviewed-by: Adam Langley <agl@google.com>
diff --git a/groups b/groups
index 43630ba..359c0ef 100644
--- a/groups
+++ b/groups
@@ -20,4 +20,5 @@
 mdb:boringssl-committers                                      	mdb/boringssl-committers
 mdb:chrome-git-admins                                         	mdb/chrome-git-admins
 mdb:gerrit-flows                                              	mdb/gerrit-flows
+mdb:gwsq                                                      	mdb/gwsq
 mdb:libjuggler-service                                        	mdb/libjuggler-service
diff --git a/project.config b/project.config
index 02b738e..6cb7336 100644
--- a/project.config
+++ b/project.config
@@ -14,6 +14,7 @@
 	read = group luci-config-service-account
 	read = group mdb/boringssl-committers
 	read = group mdb/gerrit-flows
+	read = group mdb/gwsq
 	read = group mdb/libjuggler-service
 	revert = group Change Owner
 	revert = group Project Owners
@@ -51,6 +52,7 @@
 	label-Owners-Override = +0..+1 group mdb/chrome-git-admins
 	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
 	Read = group SLSA Policy Verification Service Accounts
+	removeReviewer = group mdb/gwsq
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners
@@ -149,9 +151,11 @@
 [capability]
 	administrateServer = group mdb/boringssl-committers
 	administrateServer = group mdb/chrome-git-admins
+	createAccount = group mdb/gwsq
 	runAs = group mdb/gerrit-flows
 	viewAllAccounts = group boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com
 	viewAllAccounts = group mdb/gerrit-flows
+	viewAllAccounts = group mdb/gwsq
 	viewSecondaryEmails = group boringssl-scoped@luci-project-accounts.iam.gserviceaccount.com
 [plugin "jwtservice"]
 	audience = https://api.cr.dev