Appropriate privileges for Non UIS team working with UIS Drupal Team on a given repo

Hey all,

We have a repo (https://gitlab.developers.cam.ac.uk/uis/devops/webcms/drupal-10-migrations/undergraduate-wts) where we are going to have to collaborate with members of the team in the Admissions office.

We want to make sure that they cannot commit directly to master or merge a branch into master as this will need to be overseen by the Drupal team (as this repo mirrors to a repo on Pantheon, our cloud platform provider). All we want them to be able to do is commit to branches and raise MR's.

Is my understanding correct that so long as they are a role of Developer or lower, if the repo is managed by the Project Factory, these restrictions would be in place automatically? If not, advice on the best way to achieve this outcome would be great.

Thank you!