This module adds two "Backend User" groups (group_backend and group_backend_ui_users) with restricted access to odoo backend only (/web), with less and more controlled access than the native "Internal User" group.
> The problem with the "Internal User" group (base.group_user) is that > it can be used by any new module added to your project, so you don't > control clearly this group's accesses.
The UI access is provided only for group_backend_ui_users :
- minimal default access rules to access the user's own data:
- users and partners
- mail activity, notification and channel
- presence
- minimal default menu to restrict the available ones:
- notification
- activities
Here is an example where a user from group_backend_ui_users can only access and use the Dummy App. No other application is available to this user (you may define your own application instead of the Dummy one).
We suggest to use this module with its companion base_user_role.
Limitations
At the time of writing, Odoo uses user.share == False and user.has_group("base.group_user") == True to give the backend access to user.
So technically, the module does 2 things :
- It sets the share parameter to False for group_backend users.
- It hijacks the has_group method of res.users by returning True for group_backend users when the requested group is base.group_user
This avoids to write a lot of overwrite in different controllers from different modules ('portal', 'web', 'base', 'website') with hard coded statements that check if user is part of the base.group_user or share == False group.
auto_awesome What this module does
AI-generated from the code · Odoo 18.0Adds two new user types, "Backend user" and "Backend UI user", that can log into the Odoo backend with a much smaller, controlled set of menus and data access than the standard Internal User.
This module creates two new user types in the Users settings: "Backend user" and "Backend UI user". They are meant as a safer alternative to the standard Internal User, whose broad default permissions are hard to control.
- A "Backend user" can open the Odoo backend (the /web interface) but gets no menus or data access by default; you decide what to grant.
- A "Backend UI user" gets a minimal working interface: access to their own user and partner data, presence, activities, notifications, chat channels, attachments, sequences and calendar events (mostly read-only).
- Users in either group are treated as internal users by Odoo, so they are not counted as portal/external users.
For "Backend UI users", top-level menus that have no group restriction are hidden, so they only see menus that were explicitly assigned to them. The module ships a demo "Dummy" application (a simple list of records with a value, another value and start/stop dates) to show how such a user can be limited to one application only.
It touches the user, menu and access-right areas of Odoo, plus mail, calendar and presence. No scheduled jobs or emails are added.
Depends on
Menus it adds
Models and fields (3)
- res.users · extends an existing model
- ir.ui.menu · extends an existing model
- backend.dummy.model · new modelmy_value, date_stop, date_start, my_other_value
Text generated by AI (DeepSeek) from reading the Odoo 18.0 code on GitHub; it may contain mistakes, so check the code before deciding. View the code on GitHub
Availability by version
Reviewed: 2026-11-03Confirmation status: 2 confirmed, 7 with no information of 9 versions.
Sources · Odoo 16.0
Confirmed on 2026-11-03 in branch 16.0 of OCA/server-backend.
terminal Installation and usage
OCA documentation · Odoo 18.0Configuration
Source · Odoo 18.0To allow a user from the group_backend_ui_users group to interact with a specific model you can either add an access rules to this model for group_backend_ui_users or you can add group_backend_ui_users to the implied_ids of a new specific group.
The Backend groups are from the "User types" category (base.module_category_user_type), the same category as "Internal User" (base.group_user), "Portal" (base.group_portal) or Public (base.group_public). Be aware that a user can only belongs to one group of this category.
Usage
Source · Odoo 18.0To use this module, add a user to the group "Backend user" or "Backend UI user" through the user's form page.
If you created a specific group with group_backend or group_backend_ui_users in its implied_ids, you need to go through the group's form page in order to add the user to this specific group, because it won't be displayed on the user's form page (a specific group with its own category is displayed on user's form page only if the group inherits the "Internal user" group).
This module also restricts the root menus displayed to Backend users, so be sure to explicitly add your Backend group to all the necessary root menus for these users.
No verified information in OCA: Installation.
Installation instructions, the distribution package, dependencies and configuration steps are not shown because they have not yet been verified in the module documentation for any version.
Data imported from GitHub: this sheet reflects the latest catalog review, not a live lookup. Always check the module documentation and staging before installing in production.