Manage user permissions efficiently through dedicated security roles. The Roles tab allows administrators to assign predefined roles to users, ensuring consistent access rights, simplified user management, and reduced manual configuration across the Odoo environment.

Quickly create security roles by copying access rights and security groups from an existing user. This feature eliminates repetitive configuration, ensures permission consistency, and helps administrators standardize role-based access management across the organization.

Assign one or more predefined security roles to a user and automatically combine permissions from all assigned roles. This approach simplifies access management, reduces manual configuration, and ensures consistent security policies across different departments and responsibilities.

Generate a new security role directly from a user's current permissions with a single click. This feature automatically copies the user's assigned access rights and security groups, helping administrators create reusable roles quickly while maintaining consistent permission structures.

Quickly create a reusable security role by copying all permissions, access rights, and security groups from an existing user. The role creation wizard provides a streamlined way to standardize access management while reducing manual configuration effort.

Review and manage all permissions assigned to a role from a centralized configuration screen. Security groups copied from an existing user are automatically added to the role, allowing administrators to standardize access rights and reuse permission structures across multiple users.

Set up a fully configured user straight from a role, without assigning permissions one by one. Using the "Create User from this Role" action on any role, administrators generate a new user account that automatically receives every security group defined in that role. This keeps access consistent across the team and turns onboarding into a quick, repeatable step.

Grant or suspend a user's role-based access for a fixed period, fully automatically. From the Temporary Activation and Blocking tab on any role, administrators add per-user rules with a type, Block or Activate, and a start and end date. A scheduled action runs quietly in the background each day and applies these rules on time: blocked users lose the role's permissions for the chosen window, activated users receive them, and everything reverts on its own once the period ends, all without ever removing the user's link to the role.

Make technical security groups available on the role form without switching on developer mode. A configuration option, "Show technical user groups on roles forms without developer mode," controls this directly: while it is off, the role's group selector lists only the standard groups and stays clean; once it is enabled, the full set, including technical groups, appears so administrators can assign them right away. Turning the option back off hides those technical groups again, giving you a single switch to expand or simplify the available permissions without ever touching developer mode.

Move an entire role's users from email to in-app notifications with one switch. When "Receive notifications in Odoo" is enabled on a role, every user assigned to that role has their preference set to Handle in Odoo, so alerts arrive in the Odoo inbox instead of their email. Any user added to the role later picks up the same setting automatically, keeping the whole team's notification behavior consistent without editing each profile by hand.

Retire a role from everyday use without losing any of its configuration. Archiving a role takes it out of the active list while keeping its assigned groups, linked users, and temporary rules safely stored. Whenever the role is needed again, it can be restored exactly as it was, so you can pause access profiles you do not currently need instead of rebuilding them from scratch.