Hello Malta,

It is advisable not to grant all analytic accounting access to every internal user in Odoo. Instead, Odoo offers various user roles and permissions with specific functionalities:

1. Billing User: This role allows managing customer invoices, credit notes, and financial transactions. Billing users can create, validate invoices, handle customer payments, and perform follow-ups.

2. Read-only User: Users with this role have limited access rights and can only view data within Odoo. They cannot make changes to records, making it suitable for those who need information access without editing privileges.

3. Bookkeeper: Bookkeepers are responsible for managing financial records like general journal entries, vendor bills, and expenses. Their role is to maintain accurate financial data and keep the books up to date.

4. Accountant: Accountants have more extensive access rights than bookkeepers and billing users. They can manage and reconcile bank statements, create financial reports, and exercise greater control over accounting processes.

5. Consolidation User: Consolidation users handle financial data consolidation in multi-company setups. They are authorized to manage inter-company transactions and generate consolidated financial reports.

Assigning the above roles to users based on their job roles will help restrict data creation and manipulation for specific groups.

Additionally, you can create custom user groups with tailored access rights according to your specific needs and requirements. This gives you more flexibility in defining permissions for different user categories.

Hope this answer will help you.

Thanks & Regards,
Email:  odoo@aktivsoftware.com 

Skype: kalpeshmaheshwari