Hello Odoo Community,

We're hoping to tap into the collective wisdom here regarding a specific reseller workflow we're trying to implement on Odoo Online (v18.3).

Our Goal: Our ideal setup is to have our external resellers operate as autonomous sales agents. We want to empower them to log into our Odoo instance as Portal Users and be able to perform two key actions independently:

1. Create new Customers (res.partner).
2. Create and send Quotations (sale.order) to those customers.

Essentially, we want them to manage their own sales pipeline from start to finish without needing constant intervention from our internal team.

What We've Tried So Far: We've spent a good amount of time trying to configure this and have hit a wall. We wanted to share our steps to show what we've already attempted and see if we've missed something obvious:

1. Standard Portal Access: We created a contact for our test reseller and used the "Grant portal access" action. This worked as expected; the user can log in and see documents shared with them.  
2. Direct User Permissions: We went to the user's profile in Settings, but the "Access Rights" tab for a Portal User is fundamentally different from an Internal User. It lacks the granular, app-by-app permissions, which seems to be by design.  
3. Access Control Lists (ACLs): Using developer mode, we navigated to the base.group_portal security group and added new Access Rights, specifically granting "Create" and "Write" permissions for the Sales Order and Contact models. After saving and clearing the cache, this had no effect. The portal user still couldn't create records and received permission errors.  
4. Odoo Studio: As a last resort, we used Studio to add a "Create New Quote" button to the portal view. The button appeared, but clicking it resulted in a permission error, which makes sense as Studio primarily controls the view layer and can't override core security rules.  

Our Questions for the Community:

After our tests, we're starting to think that what we want to achieve might not be possible on the standard Odoo Online platform due to the strict distinction between paid "Internal Users" and free "Portal Users". It seems the system is designed to prevent portal users from performing core business actions.  

1. Is Our Goal Realistic for Odoo Online? Is our expectation of giving a Portal User the ability to create customers and quotes asking too much from the standard SaaS platform? Has anyone successfully configured this without migrating to Odoo.sh or On-Premise?
2. How Do You Manage Your Resellers? We're very interested in learning from your experiences.
   • What does your reseller workflow look like in Odoo?
   • Do you set up your resellers as full Internal Users? If so, how do you approach the licensing costs for a large reseller network?
   • If you use Portal Users, how do they function? Do they simply pass leads to your internal team, who then create the quotes?
3. Understanding the "Resellers" Module We also installed and explored the official "Resellers" module. From our perspective, it seems to be more of a lead-forwarding and commission-tracking tool, where an internal salesperson is still required to handle the actual sale and quote creation. This creates the "double work" we're trying to avoid. Is our understanding of this module correct, or are we missing a key piece of its functionality that allows for independent sales?  

It feels like the standard workflow treats a reseller more like a referrer/affiliate rather than a self-sufficient sales channel. We've seen forum posts where developers mention using custom code (like request.sudo()) on Odoo.sh or On-Premise to get around this, but we'd love to find a solution that works on Odoo Online if one exists.  

Thank you in advance for any insights, advice, or alternative workflows you can share! We appreciate you taking the time to help.