Update Gerrit permissions for global service users (built at http://cl/899219124)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts
    Submit:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
    Push:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
  Section [GLOBAL_CAPABILITIES]:
    viewAllAccounts:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts

groups

diff --git a/groups b/groups
index 8c90ac9..29d3178 100644
--- a/groups
+++ b/groups
@@ -1,6 +1,9 @@
 # UUID                                                        	Group Name
 #
+0d449c81e7182cbb69e27fc8ad7343c6fdd56f7f                      	autoupdate-vigil-service-accounts
 541e69c4993c5e7e2e07941762576c0b837199bc                      	SLSA Policy Verification Service Accounts
+73ea2f637658088348abff24a21fac106a0383a2                      	autoupdate-service-accounts
+ee447d6e833e67cba8bf986523dbb2a13875b0ec                      	autoupdate-onboarding-service-accounts
 global:Anonymous-Users                                        	Anonymous Users
 global:Project-Owners                                         	Project Owners
 global:Registered-Users                                       	Registered Users

project.config

diff --git a/project.config b/project.config
index 9ffbef9..6f9ee20 100644
--- a/project.config
+++ b/project.config
@@ -27,11 +27,15 @@
 	forgeCommitter = group Project Owners
 	forgeCommitter = group mdb/fuchsia-team
 	push = group Project Owners
+	push = group autoupdate-service-accounts
+	push = group autoupdate-vigil-service-accounts
 	push = group mdb/fuchsia-team
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -2..+2 group mdb/fuchsia-team
 	label-Code-Review = -1..+1 group Registered Users
 	submit = group Project Owners
+	submit = group autoupdate-service-accounts
+	submit = group autoupdate-vigil-service-accounts
 	submit = group mdb/fuchsia-team
 	editTopicName = +force group Project Owners
 	editTopicName = +force group mdb/fuchsia-team
@@ -39,6 +43,9 @@
 	forgeServerAsCommitter = group mdb/fuchsia-team
 	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
 	Read = group SLSA Policy Verification Service Accounts
+	Read = group autoupdate-onboarding-service-accounts
+	Read = group autoupdate-service-accounts
+	Read = group autoupdate-vigil-service-accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners
@@ -77,6 +84,9 @@
 	accepted = group google/google-union:signcla
 [capability]
 	administrateServer = group mdb/fuchsia-team
+	viewAllAccounts = group autoupdate-onboarding-service-accounts
+	viewAllAccounts = group autoupdate-service-accounts
+	viewAllAccounts = group autoupdate-vigil-service-accounts
 [notify "team"]
 	email = machina-firehose@google.com
 [plugin "its-jira"]