Hi, To make it you need to define a Record Rules Security.

You can understand the Record Rules Security Concept at this link: \https://www.odoo.com/documentation/12.0/reference/security.html#record-rules

In your case, you need to override the existing Employee Record Rules or define your owns. 

Find here an example to allow all user to read any record of your model (your.model):

<record id="your_group_id_rule" model="ir.rule">
            <field name="name">your.group.id.rule.name</field>
            <field name="model_id" ref="model_your_model"/>
            <field name="domain_force">
                [(1, '=', 1)]
            </field>
            <field name="groups" eval="[
                (4, ref('base.group_user'))
            ]"/>
            <field name="perm_read" eval="True"/>
            <field name="perm_write" eval="False"/>
            <field name="perm_create" eval="False"/>
            <field name="perm_unlink" eval="False"/>
        </record>