diff --git a/addons/base_accounting_kit/security/security.xml b/addons/base_accounting_kit/security/security.xml
new file mode 100644
index 0000000..91a683e
--- /dev/null
+++ b/addons/base_accounting_kit/security/security.xml
@@ -0,0 +1,52 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<odoo>
+    <data noupdate="1">
+        <record model="res.groups" id="group_account_dashboard">
+            <field name="name">Access to Accounting Dashboard</field>
+        </record>
+        <record id="account_asset_category_multi_company_rule" model="ir.rule">
+            <field name="name">Account Asset Category multi-company</field>
+            <field ref="model_account_asset_category" name="model_id"/>
+            <field eval="True" name="global"/>
+            <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]
+            </field>
+        </record>
+
+        <record id="account_asset_asset_multi_company_rule" model="ir.rule">
+            <field name="name">Account Asset multi-company</field>
+            <field ref="model_account_asset_asset" name="model_id"/>
+            <field eval="True" name="global"/>
+            <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]
+            </field>
+        </record>
+        <record id="account.group_account_invoice" model="res.groups">
+            <field name="name">Invoicing</field>
+            <field name="sequence">1</field>
+            <field name="implied_ids" eval="[(4, ref('base.group_user'))]"/>
+            <field name="privilege_id" ref="account.res_groups_privilege_accounting"/>
+        </record>
+        <record id="account.group_account_user" model="res.groups">
+            <field name="name">Accountant</field>
+            <field name="sequence">2</field>
+            <field name="implied_ids"
+                   eval="[(4, ref('account.group_account_invoice'))]"/>
+            <field name="privilege_id" ref="account.res_groups_privilege_accounting"/>
+        </record>
+
+        <record id="group_account_chief" model="res.groups">
+            <field name="name">Chief Accountant</field>
+            <field name="sequence">51</field>
+            <field name="implied_ids" eval="[(4, ref('account.group_account_invoice')), (4, ref('account.group_account_user')),(4, ref('account.group_account_manager'))]"/>
+            <field name="privilege_id" ref="account.res_groups_privilege_accounting"/>
+            <field name="user_ids" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
+        </record>
+        <record id="account.group_account_manager" model="res.groups">
+        <field name="name">Administrator</field>
+        <field name="sequence">52</field>
+        <field name="comment">Full access, including configuration rights.</field>
+        <field name="privilege_id" ref="account.res_groups_privilege_accounting"/>
+        <field name="implied_ids" eval="[(4, ref('account.group_account_invoice')),(4, ref('base_accounting_kit.group_account_chief'))]"/>
+        <field name="user_ids" eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"/>
+    </record>
+    </data>
+</odoo>