reporting-engine/kpi_dashboard/security/security.xml

<?xml version="1.0" encoding="utf-8"?>
<odoo>
    <record id="group_kpi_dashboard_manager" model="res.groups">
        <field name="name">Manage KPI Dashboards</field>
        <field name="category_id" ref="base.module_category_hidden"/>
        <field name="users" eval="[(4, ref('base.user_admin'))]"/>
    </record>
    <data noupdate="1">
        <record id="rule_kpi_dashboard" model="ir.rule">
            <field name="name">KPI Dashboard: User</field>
            <field name="model_id" ref="model_kpi_dashboard"/>
            <field name="domain_force">['|', ('group_ids', '=', False), ('group_ids', 'in', user.groups_id.ids)]</field>
            <field name="groups" eval="[(4, ref('base.group_user'))]"/>
        </record>
        <record id="rule_kpi_dashboard_all" model="ir.rule">
            <field name="name">KPI Dashboard: All</field>
            <field name="model_id" ref="model_kpi_dashboard"/>
            <field name="domain_force">[(1, '=', 1)]</field>
            <field name="groups" eval="[(4, ref('group_kpi_dashboard_manager'))]"/>
        </record>
    </data>
</odoo>