Connecting business processes through an ERP also connects permissions and responsibilities. This note uses Odoo 19 documentation consulted on 12 October 2026. Availability depends on the selected version and applications.
Start with roles
List the tasks, required data and allowed actions for each role. Distinguish reading, creating, changing, deleting and approving. Review incompatible responsibilities before configuration.
Test three layers
Access rights authorise operations on models. Record rules narrow accessible records. Approval rules govern the authorisation of an action. A visible or hidden menu alone does not describe the full security model.
Test exceptions
Use separate test accounts for each role. Test normal processing, rejection, unauthorised actions, temporary delegation and multi-company access where relevant. Document expected and observed results.
Mistakes to avoid
Granting excessive privileges, sharing administrator accounts, assuming all editions have the same features, and changing rules without testing their effects.
Recommended actions
Approve the role matrix, configure a test environment, verify access and approval behaviour, record acceptance and schedule access reviews. These examples do not describe any documented BS Conseils client deployment.
Sources & verification
Institutional and publisher sources consulted on 12 October 2026. The note remains educational and should be reviewed for the entity’s circumstances.