<odoo>

    <record model="res.groups" id="base_group_backend">
        <field name="name">Backend user</field>
        <field name="category_id" ref="base.module_category_user_type" />
        <field name="comment">
            This group is used to gives user backend access.

            While users in `base.group_user` gets a lot of default access
            which makes hard to define properly records/rules/menu access.

            So for maintainability you shouldn't linked any access right, rules,
            menu, and so on to this group directly.

            The only intent of this groups is to be able to get a session
            to Odoo backend (`/web`).
        </field>
    </record>

    <record model="res.groups" id="group_backend_ui_users">
        <field name="name">Backend UI user</field>
        <field name="category_id" ref="base.module_category_user_type" />
        <field name="comment">
            This group is used to gives user basic ui access.
        </field>
        <field
            name="rule_groups"
            eval="[
                (6, 0,[
                    ref('base.ir_default_user_rule'),
                    ref('base.ir_filters_delete_own_rule'),
                    ref('base.ir_filters_employee_rule'),
                    ref('base.res_company_rule_employee'),
                    ref('mail.ir_rule_mail_notifications_group_user'),
                    ref('mail.ir_rule_mail_channel_member_group_user'),
                    ref('mail.mail_activity_rule_user'),
                    ref('mail.mail_channel_rule'),
                ]),
            ]"
        />
    </record>

</odoo>
