reporting-engine/kpi/security/kpi_security.xml

<?xml version="1.0" encoding="utf-8"?>
<!-- Copyright 2012 -Now Savoir-faire Linux <https://www.savoirfairelinux.com/>
     License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl). -->

<odoo>
    <data noupdate="0">
        <record id="group_kpi_manager" model="res.groups">
            <field name="name">Manage KPI's</field>
            <field name="category_id" ref="base.module_category_hidden"/>
            <field name="users" eval="[(4, ref('base.user_root'))]"/>
        </record>
    </data>
    <data noupdate="1">

        <!-- Rule -->

        <record model="ir.rule" id="kpi_rule">
            <field name="name">kpi multi-company</field>
            <field name="model_id" ref="model_kpi"/>
            <field name="global" eval="True"/>
            <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
        </record>

        <record model="ir.rule" id="kpi_threshold_range_rule">
            <field name="name">kpi_threshold_range multi-company</field>
            <field name="model_id" ref="model_kpi_threshold_range"/>
            <field name="global" eval="True"/>
            <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
        </record>

        <record model="ir.rule" id="kpi_threshold_rule">
            <field name="name">kpi_threshold multi-company</field>
            <field name="model_id" ref="model_kpi_threshold"/>
            <field name="global" eval="True"/>
            <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
        </record>

        <record model="ir.rule" id="kpi_history_rule">
            <field name="name">kpi_history multi-company</field>
            <field name="model_id" ref="model_kpi_history"/>
            <field name="global" eval="True"/>
            <field name="domain_force">['|',('company_id','=',False),('company_id','child_of',[user.company_id.id])]</field>
        </record>

    </data>
</odoo>