Overview

A company, a mid-sized insurance firm with multiple departments including underwriting, finance, claims, HR, and IT, relied on Odoo to manage critical business processes. As the company scaled rapidly, maintaining secure, compliant, and efficient access to sensitive data across Odoo modules became a priority. The company needed a robust access control solution that could provide granular permissions, streamline user management, and ensure compliance with industry regulations all without requiring extensive coding or manual intervention.

Challenges

✗
Before implementing Access Manager Ninja, The company faced several critical challenges:
✗ Broad Access Risks Odoo’s default user model provided blanket access, risking unauthorized data exposure across departments.
✗ Lack of Granular Permissions No layered restrictions were available at the field, model, or record level, limiting precise control over data access.
✗ Manual Compliance Processes Compliance audits required manual documentation of user access, including who accessed what, when, and how, leading to inefficiencies.
✗ Inflexible User Management Admins lacked tools to enforce temporary access revocation, password policies, or login auditing, complicating user administration.
✗ Complex UI for Users Non-relevant menus and UI elements cluttered the interface, reducing user efficiency and increasing the risk of errors.

Our Solution

Braincuber deployed Access Manager Ninja, a powerful Odoo access control tool designed to provide granular, profile-based permissions and robust administrative features. The solution was tailored to address the client’s specific needs:

✓ Profile-Based Access Enabled creation of distinct profiles (e.g., Claims Agent, Underwriting Manager) to assign groups and users, with centralized access management.
✓ Model & Action Control Configured model permissions to hide or disable actions like Create, Edit, Delete, Duplicate, Archive/Unarchive, Export, or make models read-only for specific profiles.
✓ Field-Level Permissions Set fields as invisible, required, read-only, or removed external links for each profile on specific models, ensuring precise data control.
✓ Domain-Level Record Control Restricted users to specific records using custom domain filters (e.g., Claims Agents only view claims from their region).
✓ Menu / UI Element Restriction Hide menus, sub-menus, buttons, group-by, or filter options selectively for each profile, creating a simplified and relevant user interface.
✓ Additional Security Controls Disabled Developer Mode for select profiles, hid chatter to prevent exposure of internal messaging, and enforced password expiry policies with automated reminders (7 days and 1 day prior).
✓ Temporary Profile Activation / Deactivation Allowed admins to set date ranges for enabling or revoking profile access, ideal for contractors or leave periods.
✓ Admin Introspection Enabled system admins to log in as any user, force logout sessions, and view login/logout status and timestamps for comprehensive auditing.

Results & Impact

50%

• Reduction in Administrative Overhead Centralized profile-based management eliminated manual ACL updates and simplified role changes.

100%

Compliance with Audit Requirements Granular controls and login auditing ensured zero over-exposure and supported automated compliance trails.

80%

Reduction in Unauthorized Access Risks Field-level locking and domain restrictions prevented unauthorized edits and minimized human error.

90%

Improvement in User Experience Tailored profiles with invisible menus and UI elements delivered a streamlined interface, boosting productivity.

✓

Enhanced Access Flexibility Temporary profile activation/deactivation seamlessly handled contractor access and employee leave overlaps.

Conclusion

Braincuber’ Access Manager Ninja transformed The company’s Odoo ecosystem by delivering enterprise-grade access control with unmatched granularity and flexibility. By replacing blanket access with profile-based permissions, field-level restrictions, and robust auditing tools, the solution ensured compliance, enhanced security, and streamlined user management. The insurance firm now operates with confidence, knowing sensitive data is protected, compliance is effortless, and administrative tasks are significantly reduced—all within the Odoo platform.

Overview

Challenges

Our Solution

Results & Impact

Conclusion

Ready to Transform Your Finance Business?

ERP for D2C

AI Ecommerce

Cloud & DevOps

D2C Operations Platform

Food & Beverage

Beauty & Personal Care

Fashion & Apparel

Home Décor & Furniture