Home › Curriculum › Implementation Consulting › Access rights from the functional side
Configuration mastery · 14 min · 19–20Access rights from the functional side
Designing roles, assigning groups per app, segregation of duties, portal access and the Light User licence impact.
In this lesson
- Levels, groups, access rights and record rules
- Role matrix and segregation of duties
- Portal, Light Users and auditing in Odoo 20
Key points
- App levels map to groups with access rights and record rules
- Build an approved role matrix from job roles
- Segregation of duties: no one completes a risky flow alone
- Odoo 20: licence recomputed from rights; group changes logged
Real-world example
An audit found a cashier who could create vendors and register payments. The consultant built a role matrix for 22 roles, removed the conflict, made 14 drivers and store staff Light Users and 120 customers portal users, and showed the auditor the group-change log in the chatter.
Questions and answers
Who should have Administration: Settings?
A very small number of named administrators.
How should customers see their invoices?
As portal users, not internal users.