<record id="action_res_users_hr" model="ir.actions.act_window">
<field name="name">Users</field>
<field name="type">ir.actions.act_window</field>
<field name="res_model">res.users</field>
<field name="view_mode">tree,kanban,form</field>
<field name="view_id" ref="base.view_users_tree"/>
<field name="search_view_id" ref="base.view_users_search"/>
<field name="domain">[('id', '!=', 2),('id', '!=', user.id)]</field>
<field name="context">{'search_default_no_share': 1}</field>

</record>

<menuitem
id="menu_hr_user_inherit"
name="Users"
action="action_res_users_hr"
parent="hr.menu_hr_employee_payroll"
groups="hr.group_hr_manager"
sequence="6"/>

I have tried this domain [('id', '!=', 2),('id', '!=', user.id)] both in security.xml and in an action, but it's not working!
The objective of this domain is not to show user with id=2 and his own user in the Users list. but can be able to create and read other users from user model

but when I click on the Users menu as an user of group_hr_manager it gives the below error:
EvaluationError: Name 'user' is not defined
And, when I try this in security.xml file the of this group group_hr_manager can't login saying it doesn't have permission, contact your administrator.

Thanks for your Reply.