Update Gerrit permissions for global service users (built at http://cl/899219124)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts
    Submit:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
    Push:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
  Section [GLOBAL_CAPABILITIES]:
    viewAllAccounts:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts
diff --git a/groups b/groups
index 3b289bc..c18124a 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,8 @@
 # UUID                                                        	Group Name
 #
+02f8e966f3841631418018d49981fb2f5fff0d82                      	autoupdate-vigil-service-accounts
+073f54504f038d4d72dce2a3ea3717ba8a30be18                      	autoupdate-onboarding-service-accounts
+61940f1fe3a2bd0b9bfe7ee9a06367b369aa147f                      	autoupdate-service-accounts
 7b2cd19df59753cdc744285a3dfdcece9582b815                      	SLSA Policy Verification Service Accounts
 global:Anonymous-Users                                        	Anonymous Users
 global:Project-Owners                                         	Project Owners
diff --git a/project.config b/project.config
index 727a2ad..dac1829 100644
--- a/project.config
+++ b/project.config
@@ -28,6 +28,8 @@
 	forgeCommitter = group google/gem5-admins@googlegroups.com
 	forgeCommitter = group mdb/gem5-gadmins
 	push = +force group Project Owners
+	push = group autoupdate-service-accounts
+	push = group autoupdate-vigil-service-accounts
 	push = +force group google/gem5-admins@googlegroups.com
 	push = +force group mdb/gem5-gadmins
 	label-Code-Review = -2..+2 group Project Owners
@@ -37,6 +39,8 @@
 	label-Maintainer = -1..+1 group google/gem5-admins@googlegroups.com
 	label-Maintainer = -1..+1 group google/gem5-maint@googlegroups.com
 	submit = group Registered Users
+	submit = group autoupdate-service-accounts
+	submit = group autoupdate-vigil-service-accounts
 	editTopicName = +force group Project Owners
 	editTopicName = +force group google/gem5-admins@googlegroups.com
 	editTopicName = +force group mdb/gem5-gadmins
@@ -44,6 +48,9 @@
 	label-Verified = -1..+1 group mdb/kokoro-dedicated
 	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
 	Read = group SLSA Policy Verification Service Accounts
+	Read = group autoupdate-onboarding-service-accounts
+	Read = group autoupdate-service-accounts
+	Read = group autoupdate-vigil-service-accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners
@@ -106,4 +113,7 @@
 	administrateServer = group google/gem5-admins@googlegroups.com
 	administrateServer = group mdb/gem5-gadmins
 	createProject = group google/gem5-admins@googlegroups.com
+	viewAllAccounts = group autoupdate-onboarding-service-accounts
+	viewAllAccounts = group autoupdate-service-accounts
+	viewAllAccounts = group autoupdate-vigil-service-accounts
 	viewPlugins = group google/gem5-contributors@googlegroups.com