I would be very grateful if someone could help me creating some record rules.

Here's my use case:

• In Odoo standard anyone with access rights to res.partner can create a customer or a vendor.
• At our company, this process is regulated and only members of a security group called "manage_vendors" should be able to create, edit and delete vendor records.
• Users not members of the "manage_vendors" group should have read only access to vendor records.

There is a similar need but for customers.
In simple terms, we want to segregate the management of customers and vendors by using security groups.

I have spent hours trying records rule to fit this use case without success.
Any help will be greatly appreciated!

Raf