diff --git a/gerrit/acls/openstack/kayobe.config b/gerrit/acls/openstack/kayobe.config
index 5a4bebd086..a9f41888cc 100644
--- a/gerrit/acls/openstack/kayobe.config
+++ b/gerrit/acls/openstack/kayobe.config
@@ -11,6 +11,19 @@
 	label-Workflow = -1..+1 group kayobe-core
 	toggleWipState = group kayobe-core
 
+[access "refs/heads/unmaintained/*"]
+	abandon = group Change Owner
+	abandon = group Project Bootstrappers
+	abandon = group Release Managers
+	abandon = group kayobe-unmaintained-core
+	exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+	label-Code-Review = -2..+2 group Project Bootstrappers
+	label-Code-Review = -2..+2 group kayobe-unmaintained-core
+	label-Code-Review = -1..+1 group Registered Users
+	label-Workflow = -1..+0 group Change Owner
+	label-Workflow = -1..+1 group Project Bootstrappers
+	label-Workflow = -1..+1 group kayobe-unmaintained-core
+
 [label "Backport-Candidate"]
 	copyCondition = changekind:NO_CODE_CHANGE OR is:ANY
 	defaultValue = 0
diff --git a/gerrit/acls/openstack/kolla.config b/gerrit/acls/openstack/kolla.config
index f1b4172bc7..76771c13b4 100644
--- a/gerrit/acls/openstack/kolla.config
+++ b/gerrit/acls/openstack/kolla.config
@@ -11,6 +11,19 @@
 	label-Workflow = -1..+1 group kolla-core
 	toggleWipState = group kolla-core
 
+[access "refs/heads/unmaintained/*"]
+	abandon = group Change Owner
+	abandon = group Project Bootstrappers
+	abandon = group Release Managers
+	abandon = group kolla-unmaintained-core
+	exclusiveGroupPermissions = abandon label-Code-Review label-Workflow
+	label-Code-Review = -2..+2 group Project Bootstrappers
+	label-Code-Review = -2..+2 group kolla-unmaintained-core
+	label-Code-Review = -1..+1 group Registered Users
+	label-Workflow = -1..+0 group Change Owner
+	label-Workflow = -1..+1 group Project Bootstrappers
+	label-Workflow = -1..+1 group kolla-unmaintained-core
+
 [label "Backport-Candidate"]
 	copyCondition = changekind:NO_CODE_CHANGE OR is:ANY
 	defaultValue = 0