| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 1449 |
| Technical Name |
access_profiles_at |
| License | OPL-1 |
| Website | https://arure.tech |
| Versions | 17.0 18.0 19.0 |
| Availability |
Odoo Online
Odoo.sh
On Premise
|
| Odoo Apps Dependencies |
Discuss (mail)
|
| Lines of code | 1449 |
| Technical Name |
access_profiles_at |
| License | OPL-1 |
| Website | https://arure.tech |
| Versions | 17.0 18.0 19.0 |
For Odoo 19 · Role-based access · User onboarding · Audit log
User Roles & Permissions
Onboard 30 users in one click. Stop clicking 40 checkboxes per user. Delegate user creation to HR without granting Settings access. Every permission change logged for compliance audit. Role-based access control (RBAC) for Odoo 19.
The only Odoo access module that delegates user creation safely — not just hides Settings menus.
$45
Per database
8
Role templates
90 days
Refund window
47/47
Tests passing
support@arure.tech
WhatsApp +1 858 463 4405
What you get
Four shifts in how Odoo user management works: role templates instead of the per-user checkbox grid, safe delegation to non-admin staff, live preview before bulk apply, and a compliance audit log of every permission change.
Permission templates, no checkbox grid
Bundle the right permissions into named user roles like Sales Rep or Accountant. Assign a role to a user with one click. The user gets the union of every permission in every assigned role.
Delegate user creation to non-admin staff
A new User Manager role lets HR or operations leads create and configure users from a dedicated app icon. They never see the Settings app or your technical configuration. Privilege-escalation guard prevents them from granting administrator access.
Live preview of permission changes
Bulk-apply a role to 30 users at once. The wizard shows exactly which permissions each user will gain or lose before you click Apply, and warns you in red when an admin-level group is involved.
Compliance audit log of every change
Append-only audit log captures who changed whom, before/after, and an optional reason. Colour-coded activity feed scoped to the last 7 days by default. Ready for GDPR, SOC 2, ISO 27001, or internal-policy review.
Who this is for
Administrators delegating
You don't want to give HR or operations the Settings app, but they need to onboard users. Hand them a User Manager role with a top-level menu of its own.
Operations onboarding teams
You hire ten reps a quarter and configuring permissions one user at a time burns hours. Pick the role, tick the users, click Apply.
Compliance & security teams
You need an immutable record of who promoted whom, and a hard guard that stops a User Manager from elevating someone above their own access.
See it running
Real screenshots from a fresh Odoo 19 instance, organised the way you'll meet the module — setup first, then daily use, then the audit trail. Click any image to view full size.
Set it up
Eight built-in profiles seeded on install
Build a custom profile by bundling groups
Use it daily
Assign profiles from the user form
Bulk-apply to many users with live preview
Admin-level warning fires before you click Apply
Trust it
Audit log activity feed — colored by change type
Top-level menu — separate from Settings
Common scenarios
Three scenarios this module is built for.
Onboarding 30 sales reps in one go
Pick the Sales Rep role, tick the 30 new users in the list view, click Apply. Wizard preview shows exactly which permissions each user will gain. ~5 minutes vs ~150 minutes for the per-user checkbox grid.
Letting HR create users without admin access
Grant HR the User Manager role. They get a top-level User Management app icon, can create and configure users from there, and never see the Settings app. Privilege-escalation guard blocks them from elevating anyone above their own access.
GDPR / SOC 2 / ISO 27001 audit trail
Append-only audit log records who changed whom, before/after group membership, and an optional reason per change. Activity-feed kanban view colour-coded by change type. One screenshot is the answer to most permission-related audit questions.
Frequently asked
Does this replace Odoo's standard user permissions?
No. It sits on top of Odoo's standard permission groups and bundles them into named roles. The standard Access Rights tab on the user form continues to work as it always has — this module just gives you a faster way to assign the same groups.
What happens if a User Manager tries to grant administrator access?
The save fails with a clear error message. The privilege-escalation guard is enforced at the data layer, not just hidden in the UI. A User Manager who isn't already an administrator can never promote anyone to administrator. Full administrators bypass the guard.
Which built-in profiles are seeded on install?
Eight templates: Sales Rep, Sales Manager, Accountant, Finance Manager, Inventory Clerk, Inventory Manager, HR Officer, Customer Support. Each one only seeds when its underlying app is installed in your database. Profiles whose required apps aren't installed are silently skipped, so a fresh database without HR doesn't get a broken HR Officer profile.
Can I create my own profiles?
Yes. Profiles are full records you create from User Management → Access Profiles. You pick a name, description, category, color, and the bundle of groups. The Clone button lets you start from a built-in profile and tweak it for your organisation.
If I remove a profile from a user, does the user lose those permissions?
No. Profiles are an additive bundling abstraction. Removing a profile leaves the user's existing permissions in place. To explicitly strip permissions, use the bulk-apply wizard in Replace mode — the wizard preview shows exactly which groups will be revoked before you confirm.
Is the audit log tamper-proof?
Append-only by design. User Managers have read access only — no write, no delete. Full administrators can delete rows for retention purposes but cannot edit them. The list and form views block create and edit even for admins. Each entry captures who, when, and a snapshot of what changed.
Will this work alongside other modules that touch users or permissions?
Yes. The user-form override calls the standard write method once and passes the merged permission set onward, so other modules that override user CRUD continue to fire. We've tested it alongside the full Arure connector portfolio (WooCommerce, FedEx, Klaviyo, BI, MCP) plus base Odoo Sales, Stock, and Accounting without conflicts.
What happens if I uninstall?
Profile assignments are detached cleanly so the link table can drop. Users keep whatever Odoo permission groups they had at the moment of uninstall (the module never strips groups on its own). The User Management menu disappears, the audit log table is removed by Odoo's standard sweep. No historical user data is affected.
Why is this $45 and not free?
Free modules don't get support; paid modules do. $45 reflects the depth here — a privilege-escalation guard with thorough test coverage, an append-only audit log designed for compliance, and a delegation pattern that's tricky to get right. The 90-day refund window means buying it costs roughly the same as installing a free module that doesn't quite fit.
Will this work on Odoo Online (SaaS)?
No. Per Odoo's policy, third-party paid apps cannot be installed on Odoo Online. This module runs on Odoo.sh and on-premise (self-hosted Community or Enterprise) deployments.
Evaluate before you commit. Buy when you're confident.
You have up to 90 days to claim a full refund. Reach us through any channel below — we reply within 1 business day.
WhatsApp
+1 858 463 4405
Quick questions, same-business-day reply.
More from Arure Technologies
What's New
Release notes for every published version. The full CHANGELOG.md is included inside the module package.
v19.0.2.0.0
2026-05-08
Latest
UI/UX overhaul
New
- Bulk-apply wizard now shows a live preview — exactly which permissions each selected user will gain or lose, before you click Apply.
- A red banner fires whenever the chosen profile contains an administrator-level group, with a reminder that the privilege-escalation guard will block User Managers from saving.
- Profile kanban gets per-record colors, contextual ribbons (High-privilege / Built-in / Archived), inline app summary, and an Apply button on every card.
- Audit log gets an activity-feed kanban view (color-coded badge per change type) plus row decorations on the list view.
- Clone action on every profile — duplicate a built-in into an editable copy with one click.
- Full administrators automatically see the User Management menu — no manual role assignment needed.
Quality & safety
- 47 unit tests passing on a fresh Odoo 19 instance, plus full regression-tested compatibility with the rest of the Arure connector portfolio.
- Built-in profiles get stable xmlids so HRIS / SCIM provisioning flows can resolve them by code.
- Migration script backfills the new color and icon data on upgrade without clobbering existing customisations.
v19.0.1.0.0
2026-05-08
Initial Odoo 19 release
What's in the box
- Bundle Odoo permissions into named profiles. Assign one to a user. The user gets the union of every permission in every assigned profile.
- New User Manager role with its own top-level menu — for delegating user provisioning without granting Settings access.
- Privilege-escalation guard at the user-write layer. A User Manager can never grant administrator access they don't already have themselves.
- Append-only audit log of every profile change, with optional reason captured per change.
- Eight built-in role templates seeded conditionally on installed apps.
Quality & safety
- 23 unit tests passing on a fresh Odoo 19 instance.
- Reversible — uninstall detaches profiles cleanly. Users keep their underlying Odoo permissions; no historical data is rewritten.
License
Odoo Proprietary License (OPL-1). Per-database license. Source code included; not redistributable.
Trademarks
Odoo is a registered trademark of Odoo S.A. This module is an independent extension developed by Arure Technologies and is not affiliated with, endorsed by, or sponsored by Odoo S.A.
Odoo Proprietary License v1.0 This software and associated files (the "Software") may only be used (executed, modified, executed after modifications) if you have purchased a valid license from the authors, typically via Odoo Apps, or if you have received a written agreement from the authors of the Software (see the COPYRIGHT file). You may develop Odoo modules that use the Software as a library (typically by depending on it, importing it and using its resources), but without copying any source code or material from the Software. You may distribute those modules under the license of your choice, provided that this license is compatible with the terms of the Odoo Proprietary License (For example: LGPL, MIT, or proprietary licenses similar to this one). It is forbidden to publish, distribute, sublicense, or sell copies of the Software or modified copies of the Software. The above copyright notice and this permission notice must be included in all copies or substantial portions of the Software. THE SOFTWARE IS PROVIDED "AS IS", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE AUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER LIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM, OUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE SOFTWARE.
Please log in to comment on this module