Update Gerrit permissions for global service users (built at http://cl/899219124)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts
    Submit:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
    Push:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
  Section [GLOBAL_CAPABILITIES]:
    viewAllAccounts:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts

groups

diff --git a/groups b/groups
index 54f65bb..de8c399 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,9 @@
 # UUID                                                        	Group Name
 #
 3157c2f81e2b727686fefc77b78574ec77273b01                      	SLSA Policy Verification Service Accounts
+440b90a9b062f98dcf597a555cf659d03807501a                      	autoupdate-service-accounts
+9326b810653d39fef5f3c4477ab5a23abfb1a99e                      	autoupdate-vigil-service-accounts
+9c767d96af1e4ab9e1c4b12c7465f5ac9ba87e85                      	autoupdate-onboarding-service-accounts
 fc16cdd071c21660395862c7c23667cc38638aae                      	Core Team
 global:Anonymous-Users                                        	Anonymous Users
 global:Change-Owner                                           	Change Owner

project.config

diff --git a/project.config b/project.config
index cca69b9..cdb0d35 100644
--- a/project.config
+++ b/project.config
@@ -30,13 +30,20 @@
 	label-Code-Review = -2..+2 group mdb/cerebrahw-leads
 	label-Code-Review = -1..+1 group Registered Users
 	push = group Project Owners
+	push = group autoupdate-service-accounts
+	push = group autoupdate-vigil-service-accounts
 	push = group mdb/cerebra-hw
 	push = group mdb/cerebrahw-leads
 	read = group Anonymous Users
 	read = group SLSA Policy Verification Service Accounts
+	read = group autoupdate-onboarding-service-accounts
+	read = group autoupdate-service-accounts
+	read = group autoupdate-vigil-service-accounts
 	revert = group Registered Users
 	submit = group Core Team
 	submit = group Project Owners
+	submit = group autoupdate-service-accounts
+	submit = group autoupdate-vigil-service-accounts
 	submit = group mdb/cerebrahw-leads
 	pushMerge = group mdb/cerebrahw-leads
 	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
@@ -79,6 +86,9 @@
 	accepted = group mdb/google-cla-gerrit-robot-accounts
 [capability]
 	administrateServer = group mdb/cerebrahw-leads
+	viewAllAccounts = group autoupdate-onboarding-service-accounts
+	viewAllAccounts = group autoupdate-service-accounts
+	viewAllAccounts = group autoupdate-vigil-service-accounts
 [notify "team"]
 	header = cc
 	email = cerebra-hw-auto@google.com