Update Gerrit permissions for global service users (built at http://cl/899219124)

Added permissions:
  Section [refs/heads/*]:
    Read:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts
    Submit:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
    Push:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
  Section [GLOBAL_CAPABILITIES]:
    viewAllAccounts:
      ALLOW: autoupdate-vigil-service-accounts
      ALLOW: autoupdate-service-accounts
      ALLOW: autoupdate-onboarding-service-accounts

groups

diff --git a/groups b/groups
index 40bd70b..057ce42 100644
--- a/groups
+++ b/groups
@@ -1,5 +1,8 @@
 # UUID                                  	Group Name
 #
+541d03b1c6e224a0e82725efe5062f8f77078eee	autoupdate-service-accounts
+6f61983fad86248f0526eeb1fbce1b5b154cf031	autoupdate-vigil-service-accounts
+9dc86559f34553e336e8c86faf854012d34cc310	autoupdate-onboarding-service-accounts
 cd7e9f10673ae8edb9ca9f681630c55e3d91315d	SLSA Policy Verification Service Accounts
 global:Anonymous-Users                  	Anonymous Users
 global:Project-Owners                   	Project Owners

project.config

diff --git a/project.config b/project.config
index 4be7688..8679911 100644
--- a/project.config
+++ b/project.config
@@ -20,16 +20,23 @@
 	forgeCommitter = group Project Owners
 	forgeCommitter = group ldap/android-devtools
 	push = group Project Owners
+	push = group autoupdate-service-accounts
+	push = group autoupdate-vigil-service-accounts
 	push = group ldap/android-devtools
 	label-Code-Review = -2..+2 group Project Owners
 	label-Code-Review = -2..+2 group ldap/android-devtools
 	label-Code-Review = -1..+1 group Registered Users
 	submit = group Project Owners
+	submit = group autoupdate-service-accounts
+	submit = group autoupdate-vigil-service-accounts
 	submit = group ldap/android-devtools
 	editTopicName = +force group Project Owners
 	editTopicName = +force group ldap/android-devtools
 	label-SLSA-Policy-Verified = -1..+1 group SLSA Policy Verification Service Accounts
 	Read = group SLSA Policy Verification Service Accounts
+	Read = group autoupdate-onboarding-service-accounts
+	Read = group autoupdate-service-accounts
+	Read = group autoupdate-vigil-service-accounts
 [access "refs/meta/config"]
 	exclusiveGroupPermissions = read
 	read = group Project Owners
@@ -60,3 +67,6 @@
 	addPatchSet = group Registered Users
 [capability]
 	administrateServer = group ldap/android-devtools
+	viewAllAccounts = group autoupdate-onboarding-service-accounts
+	viewAllAccounts = group autoupdate-service-accounts
+	viewAllAccounts = group autoupdate-vigil-service-accounts