diff --git a/groups b/groups
index 7821960..1587313 100644
--- a/groups
+++ b/groups
@@ -1,8 +1,8 @@
 # UUID                                  	Group Name
 #
 11c0fe2ab9076215c8ff0123f9961da7ee79e9e8	Administrators
-b4db2abda7ad843442a51293fe8991bcbf9c686a	tosa-contributors
 3916526717f19248157bd3eb40f154fbaa380096	arm-power-users
+b4db2abda7ad843442a51293fe8991bcbf9c686a	tosa-contributors
 c9101f9ca1b217e40117e06c48caa8e92e7681ff	Non-Interactive Users
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners
diff --git a/project.config b/project.config
index 50bc693..074558c 100644
--- a/project.config
+++ b/project.config
@@ -7,15 +7,10 @@
 	enableSignedPush = false
 [submit]
 	mergeContent = true
-[capability]
-	administrateServer = group Administrators
-	priority = batch group Non-Interactive Users
-	streamEvents = group Non-Interactive Users
-	accessDatabase = group Administrators
-	createGroup = group arm-power-users
 [access "refs/*"]
 	read = group Administrators
 	read = group Anonymous Users
+	revert = group Registered Users
 [access "refs/for/*"]
 	addPatchSet = group Registered Users
 [access "refs/for/refs/*"]
@@ -66,8 +61,14 @@
 	value = +1 Looks good to me, but someone else must approve
 	value = +2 Looks good to me, approved
 [contributor-agreement "TOSA"]
-    description = Contributor license agreement for the TOSA projects.
-    agreementUrl = static/tosa_cla.html
-    autoVerify = group tosa-contributors
-    accepted = group tosa-contributors
-    matchProjects = ^/tosa/.*$
+	description = Contributor license agreement for the TOSA projects.
+	agreementUrl = static/tosa_cla.html
+	autoVerify = group tosa-contributors
+	accepted = group tosa-contributors
+	matchProjects = ^/tosa/.*$
+[capability]
+	accessDatabase = group Administrators
+	administrateServer = group Administrators
+	createGroup = group arm-power-users
+	priority = batch group Non-Interactive Users
+	streamEvents = group Non-Interactive Users