diff --git a/grants.yml b/grants.yml
index c6db6303..8892b95a 100644
--- a/grants.yml
+++ b/grants.yml
@@ -3124,6 +3124,32 @@
         alias: [mozilla-beta, mozilla-release, mozilla-esr115, mozilla-esr128, mozilla-esr140]
         job: action:release-promotion
 
+- grant:
+    - project:releng:lando:action:l10n_bump
+    - project:releng:lando:repo:{lando_repo}
+  to:
+    - project:
+        alias: [comm-beta]
+        job: cron:l10n-bumper
+
+- grant:
+    - project:releng:lando:action:tag
+    - project:releng:lando:repo:{lando_repo}
+  to:
+    - project:
+        alias: [comm-beta, comm-release, comm-esr115, comm-esr128, comm-esr140]
+        job: action:release-promotion
+
+- grant:
+    - project:releng:lando:action:version_bump
+    - project:releng:lando:repo:{lando_repo}
+  to:
+    - project:
+        # comm-central is not needed here because those version bumps are
+        # done through a `merge_day` task
+        alias: [comm-beta, comm-release, comm-esr115, comm-esr128, comm-esr140]
+        job: action:release-promotion
+
 # merge day scopes are a bit weird; some repositories update themselves and
 # others, while some only update themselves.
 # TODO: replace the singular `merge_day` action with behaviour-specific scopes
@@ -3140,6 +3166,14 @@
         alias: [mozilla-central, mozilla-beta, mozilla-esr115, mozilla-esr128, mozilla-esr140]
         job: action:merge-automation
 
+- grant:
+    - project:releng:lando:action:merge_day
+    - project:releng:lando:repo:{lando_repo}
+  to:
+    - project:
+        alias: [comm-central, comm-beta, comm-esr115, comm-esr128, comm-esr140]
+        job: action:merge-automation
+
 # granting scopes for cross-repo updates is also straightforward, but it looks
 # a bit weird to have things like `mozilla-central` being able to update `beta`.
 # in an ideal world perhaps we'd run the actions on the target repositories
@@ -3166,3 +3200,24 @@
     - project:
         alias: mozilla-release
         job: action:merge-automation
+
+- grant:
+    - project:releng:lando:repo:comm-beta
+  to:
+    - project:
+        alias: comm-central
+        job: action:merge-automation
+
+- grant:
+    - project:releng:lando:repo:comm-release
+  to:
+    - project:
+        alias: comm-beta
+        job: action:merge-automation
+
+- grant:
+    - project:releng:lando:repo:comm-esr140
+  to:
+    - project:
+        alias: comm-release
+        job: action:merge-automation