diff --git a/academy_management/__manifest__.py b/academy_management/__manifest__.py
index d5bff96..09304f5 100644
--- a/academy_management/__manifest__.py
+++ b/academy_management/__manifest__.py
@@ -23,6 +23,7 @@ Academy Management
     # always loaded
     'data': [
         'security/ir.model.access.csv',
+        'security/academy_security.xml',
         'data/ir_sequence_data.xml',
         'views/academy_course_views.xml',
         'views/academy_schedule_views.xml',
diff --git a/academy_management/security/ir.model.access.csv b/academy_management/security/ir.model.access.csv
index f77db5c..6d02c05 100644
--- a/academy_management/security/ir.model.access.csv
+++ b/academy_management/security/ir.model.access.csv
@@ -1,5 +1,9 @@
 id,name,model_id:id,group_id:id,perm_read,perm_write,perm_create,perm_unlink
-access_academy_teacher,academy.teacher,model_academy_teacher,base.group_user,1,1,1,1
-access_academy_course,academy.course,model_academy_course,base.group_user,1,1,1,1
-access_academy_student,academy.student,model_academy_student,base.group_user,1,1,1,1
-access_academy_schedule,academy.schedule,model_academy_schedule,base.group_user,1,1,1,1
+access_academy_teacher_staff,academy.teacher,model_academy_teacher,academy_management.group_academy_staff,1,0,0,0
+access_academy_course_staff,academy.course,model_academy_course,academy_management.group_academy_staff,1,0,0,0
+access_academy_student_staff,academy.student,model_academy_student,academy_management.group_academy_staff,1,0,0,0
+access_academy_schedule_staff,academy.schedule,model_academy_schedule,academy_management.group_academy_staff,1,0,0,0
+access_academy_teacher_admin,academy.teacher,model_academy_teacher,academy_management.group_academy_admin,1,1,1,1
+access_academy_course_admin,academy.course,model_academy_course,academy_management.group_academy_admin,1,1,1,1
+access_academy_student_admin,academy.student,model_academy_student,academy_management.group_academy_admin,1,1,1,1
+access_academy_schedule_admin,academy.schedule,model_academy_schedule,academy_management.group_academy_admin,1,1,1,1
\ No newline at end of file