diff --git a/roles/distgit/pagure/templates/pagure.cfg b/roles/distgit/pagure/templates/pagure.cfg
index 9110f1acec..79b8bc4163 100644
--- a/roles/distgit/pagure/templates/pagure.cfg
+++ b/roles/distgit/pagure/templates/pagure.cfg
@@ -232,6 +232,7 @@ ACLS = {
     'generate_acls_project': 'Generate the Gitolite ACLs on a project',
     'commit_flag': 'Flag a commit',
     "update_watch_status": "Update the watch status on a project",
+    "tag_project": "Allows adding git tags to a project",
 }
 
 REQUIRED_GROUPS = {
@@ -283,6 +284,7 @@ ADMIN_API_ACLS = [
     'generate_acls_project',
     'commit_flag',
     'create_branch',
+    'tag_project',
 ]
 
 PROJECT_NAME_REGEX = '^[a-zA-z0-9_][a-zA-Z0-9-_\.+]*$'