diff --git a/.azure-pipelines/ci-build.yml b/.azure-pipelines/ci-build.yml
index e6c637c0924..94727ddbd22 100644
--- a/.azure-pipelines/ci-build.yml
+++ b/.azure-pipelines/ci-build.yml
@@ -9,9 +9,6 @@ trigger:
   tags:
     include:
       - "v*"
-  branches:
-    include:
-      - main
 
 parameters:
   - name: previewBranch
@@ -232,7 +229,7 @@ extends:
                         contentsource: "Folder"
                         folderlocation: "$(Pipeline.Workspace)"
                         waitforreleasecompletion: true
-                        owners: vibiret@microsoft.com
+                        owners: mmainer@microsoft.com,gavinbarron@microsoft.com
                         approvers: mmainer@microsoft.com
                         serviceendpointurl: "https://api.esrp.microsoft.com"
                         mainpublisher: "ESRPRELPACMAN"
diff --git a/.github/workflows/release-please-gha.yml b/.github/workflows/release-please-gha.yml
index 28f1d59d189..02305816760 100644
--- a/.github/workflows/release-please-gha.yml
+++ b/.github/workflows/release-please-gha.yml
@@ -9,7 +9,9 @@
 # variables and secrets, and then runs the release-please-action to manage versioning and changelogs.
 
 name: Release Please
-
+permissions:
+  contents: read
+  pull-requests: write
 on:
   push:
     branches: