diff --git a/profiles/base/accounts/group/debugfs-access b/profiles/base/accounts/group/debugfs-access
index adb5a34..13e7abd 100644
--- a/profiles/base/accounts/group/debugfs-access
+++ b/profiles/base/accounts/group/debugfs-access
@@ -1,3 +1,3 @@
 group:debugfs-access
 gid:605
-users:arc-camera,shill,power,metrics
+users:arc-camera,shill,power,metrics,traced-probes
diff --git a/profiles/base/accounts/group/traced b/profiles/base/accounts/group/traced
new file mode 100644
index 0000000..9084508
--- /dev/null
+++ b/profiles/base/accounts/group/traced
@@ -0,0 +1,3 @@
+group:traced
+gid:20160
+users:traced
diff --git a/profiles/base/accounts/group/traced-consumer b/profiles/base/accounts/group/traced-consumer
new file mode 100644
index 0000000..b06429d
--- /dev/null
+++ b/profiles/base/accounts/group/traced-consumer
@@ -0,0 +1,10 @@
+# This group controls the access to the Perfettto system tracing service daemon
+# "traced" as a trusted consumer. Users in this group are permitted to send
+# control commands to the service daemon and read collected trace data back.
+# Users in this group:
+#  * traced: the user to run the service daemon "traced".
+#  * chronos: for running the "perfetto" command in the crosh shell or collect
+#      trace using the Perfetto UI (ui.perfetto.dev).
+group:traced-consumer
+gid:20164
+users:traced,chronos
diff --git a/profiles/base/accounts/group/traced-probes b/profiles/base/accounts/group/traced-probes
new file mode 100644
index 0000000..399e0e5
--- /dev/null
+++ b/profiles/base/accounts/group/traced-probes
@@ -0,0 +1,3 @@
+group:traced-probes
+gid:20161
+users:traced-probes
diff --git a/profiles/base/accounts/group/traced-producer b/profiles/base/accounts/group/traced-producer
new file mode 100644
index 0000000..7979b98
--- /dev/null
+++ b/profiles/base/accounts/group/traced-producer
@@ -0,0 +1,11 @@
+# This group controls the access to the Perfettto system tracing service daemon
+# "traced" as a producer. Users in this group are permitted to receive control
+# commands from the service daemon and send trace data to the daemon as a trace
+# data source. Users in this group:
+#  * traced: the user to run "traced" in.
+#  * traced-probes: for the system probes "traced_probes" to send kernel ftrace
+#      and other system trace data to traced.
+#  * chronos: for Chrome to send Chrome trace data to traced.
+group:traced-producer
+gid:20162
+users:traced,traced-probes,chronos
diff --git a/profiles/base/accounts/user/traced b/profiles/base/accounts/user/traced
new file mode 100644
index 0000000..7b6be49
--- /dev/null
+++ b/profiles/base/accounts/user/traced
@@ -0,0 +1,6 @@
+user:traced
+uid:20160
+gid:20160
+gecos:Perfetto system tracing service
+home:/dev/null
+shell:/bin/false
diff --git a/profiles/base/accounts/user/traced-probes b/profiles/base/accounts/user/traced-probes
new file mode 100644
index 0000000..cd5063b
--- /dev/null
+++ b/profiles/base/accounts/user/traced-probes
@@ -0,0 +1,6 @@
+user:traced-probes
+uid:20161
+gid:20161
+gecos:Perfetto system tracing probes using debugfs, procfs and sysfs.
+home:/dev/null
+shell:/bin/false