diff --git a/web_favicon/README.rst b/web_favicon/README.rst
index a95c5d43..79335220 100644
--- a/web_favicon/README.rst
+++ b/web_favicon/README.rst
@@ -30,6 +30,8 @@ You have a sample SVG that can be used as template for generating your icon
 in /static/src/img/master_original_favicon.svg. You can also search for some
 favicon generators across the web.
 
+To allow an user to edit the favicon it has to be member of group "Edit Favicon".
+
 Usage
 =====
 
diff --git a/web_favicon/__manifest__.py b/web_favicon/__manifest__.py
index 418dc2f5..984c5d2e 100644
--- a/web_favicon/__manifest__.py
+++ b/web_favicon/__manifest__.py
@@ -16,8 +16,9 @@
         'web',
     ],
     "data": [
-        "views/res_company.xml",
+        'views/res_company.xml',
         'views/templates.xml',
+        'security/web_favicon_security.xml'
     ],
     'installable': True,
 }
diff --git a/web_favicon/security/web_favicon_security.xml b/web_favicon/security/web_favicon_security.xml
new file mode 100644
index 00000000..97a1be58
--- /dev/null
+++ b/web_favicon/security/web_favicon_security.xml
@@ -0,0 +1,7 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo>
+    <record id="group_edit_favicon" model="res.groups">
+        <field name="name">Edit Favicon</field>
+        <field name="category_id" ref="base.module_category_hidden"/>
+    </record>
+</odoo>
diff --git a/web_favicon/views/res_company.xml b/web_favicon/views/res_company.xml
index b8d138d3..66dc953c 100644
--- a/web_favicon/views/res_company.xml
+++ b/web_favicon/views/res_company.xml
@@ -5,7 +5,7 @@
         <field name="inherit_id" ref="base.view_company_form" />
         <field name="arch" type="xml">
             <notebook position="inside">
-                <page string="Web Favicon" name="favicon">
+                <page string="Web Favicon" name="favicon" groups="web_favicon.group_edit_favicon">
                     <group string="Favicon" name="favicon">
                         <field name="favicon_backend" widget="image" />
                         <field name="favicon_backend_mimetype" attrs="{'required': [('favicon_backend', '!=', False)]}" />