diff --git a/security/ir.model.access.csv b/security/ir.model.access.csv
index 8c2c0be97c30d7f2eacf073ff435f147057da2ca..62c704d3299da53b3665031f73d338fcb88d7f12 100644
--- a/security/ir.model.access.csv
+++ b/security/ir.model.access.csv
@@ -57,4 +57,5 @@ admin_scop_questionnaire_type,admin_scop_questionnaire_type,model_scop_questionn
 admin_scop_liasse_fiscale_source,admin_scop_liasse_fiscale_source,model_scop_liasse_fiscale_source,group_cg_administrator,1,1,1,1
 admin_res_partner_mandate,admin_res_partner_mandate,model_res_partner_mandate,group_cg_administrator,1,1,1,1
 admin_res_partner_segment,admin_res_partner_segment,model_res_partner_segment,group_cg_administrator,1,1,1,1
-admin_ur_res_partner_segment,admin_ur_res_partner_segment,model_res_partner_segment,group_ur_list_modif,1,1,1,1
\ No newline at end of file
+admin_ur_res_partner_segment,admin_ur_res_partner_segment,model_res_partner_segment,group_ur_list_modif,1,1,1,1
+base.access_res_partner_group_partner_manager,"res_partner group_partner_manager",model_res_partner,group_partner_manager,1,1,1,0
diff --git a/security/security_rules.xml b/security/security_rules.xml
index 67cab5b6e948a70a54c436fe3246536d648cf1da..c793d108e2e5810a94f574f829881746e73e2553 100644
--- a/security/security_rules.xml
+++ b/security/security_rules.xml
@@ -17,6 +17,28 @@
             <field name="implied_ids" eval="[(4, ref('group_cg_administrative')), (4, ref('group_ur_list_modif'))]"/>
         </record>
 
+        <record id="base.res_users_rule" model="ir.rule">
+            <field name="name">user rule</field>
+            <field name="model_id" ref="base.model_res_users"/>
+            <field name="domain_force">[('company_ids','child_of',[user.company_id.id])]</field>
+            <field name="groups" eval="[(4, ref('base.group_erp_manager'))]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_unlink" eval="True"/>
+        </record>
+
+        <record id="res_partner_rule_ur" model="ir.rule">
+            <field name="name">user rule administrator cg</field>
+            <field name="model_id" ref="base.model_res_users"/>
+            <field name="domain_force">[(1,'=',1)]</field>
+            <field name="groups" eval="[(4, ref('base.group_cg_administrator'))]"/>
+            <field name="perm_read" eval="True"/>
+            <field name="perm_write" eval="True"/>
+            <field name="perm_create" eval="True"/>
+            <field name="perm_unlink" eval="True"/>
+        </record>
+
         <record id="res_partner_rule_ur" model="ir.rule">
             <field name="name">partner rule per ur</field>
             <field name="model_id" ref="base.model_res_partner"/>
@@ -24,7 +46,7 @@
             <field name="groups" eval="[(4, ref('base.group_user'))]"/>
             <field name="perm_read" eval="False"/>
             <field name="perm_write" eval="True"/>
-            <field name="perm_create" eval="False"/>
+            <field name="perm_create" eval="True"/>
             <field name="perm_unlink" eval="False"/>
         </record>