partner-contact/partner_category_security/security/security.xml

<?xml version="1.0" ?>
<odoo>
    <record id="category_partner_category" model="ir.module.category">
        <field name="name">Contact Tags</field>
    </record>
    <record id="group_partner_category_user" model="res.groups">
        <field name="name">Publisher</field>
        <field name="category_id" ref="category_partner_category" />
        <field name="implied_ids" eval="[(4, ref('base.group_user'))]" />
    </record>
    <record id="group_partner_category_manager" model="res.groups">
        <field name="name">Manager</field>
        <field name="implied_ids" eval="[(4, ref('group_partner_category_user'))]" />
        <field name="category_id" ref="category_partner_category" />
        <field
            name="users"
            eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"
        />
    </record>
</odoo>