reporting-engine/kpi_dashboard/security/security.xml

<?xml version="1.0" encoding="utf-8" ?>
<odoo>
    <record id="group_kpi_dashboard_manager" model="res.groups">
        <field name="name">Manage KPI Dashboards</field>
        <field name="category_id" ref="base.module_category_hidden" />
        <field name="users" eval="[(4, ref('base.user_admin'))]" />
    </record>
    <data noupdate="1">
        <record id="rule_kpi_dashboard" model="ir.rule">
            <field name="name">KPI Dashboard: User</field>
            <field name="model_id" ref="model_kpi_dashboard" />
            <field name="domain_force">
                ['|', ('group_ids', '=', False), ('group_ids', 'in',
                user.groups_id.ids)]
            </field>
            <field name="groups" eval="[(4, ref('base.group_user'))]" />
        </record>
        <record id="rule_kpi_dashboard_all" model="ir.rule">
            <field name="name">KPI Dashboard: All</field>
            <field name="model_id" ref="model_kpi_dashboard" />
            <field name="domain_force">[(1, '=', 1)]</field>
            <field name="groups" eval="[(4, ref('group_kpi_dashboard_manager'))]" />
        </record>
    </data>
</odoo>