diff --git a/forwardport/data/security.xml b/forwardport/data/security.xml
index 3f7b8248..d25ae794 100644
--- a/forwardport/data/security.xml
+++ b/forwardport/data/security.xml
@@ -17,7 +17,33 @@
         <field name="perm_write">1</field>
         <field name="perm_unlink">1</field>
     </record>
+    <record id="access_forwardport_tagging_admin" model="ir.model.access">
+        <field name="name">Admin access to tagging</field>
+        <field name="model_id" ref="model_forwardport_tagging"/>
+        <field name="group_id" ref="runbot_merge.group_admin"/>
+        <field name="perm_read">1</field>
+        <field name="perm_create">1</field>
+        <field name="perm_write">1</field>
+        <field name="perm_unlink">1</field>
+    </record>
+    <record id="access_forwardport_branch_remover_admin" model="ir.model.access">
+        <field name="name">Admin access to branch remover</field>
+        <field name="model_id" ref="model_forwardport_branch_remover"/>
+        <field name="group_id" ref="runbot_merge.group_admin"/>
+        <field name="perm_read">1</field>
+        <field name="perm_create">1</field>
+        <field name="perm_write">1</field>
+        <field name="perm_unlink">1</field>
+    </record>
 
+    <record id="access_forwardport_tagging" model="ir.model.access">
+        <field name="name">No normal access to tagging</field>
+        <field name="model_id" ref="model_forwardport_tagging"/>
+        <field name="perm_read">1</field>
+        <field name="perm_create">0</field>
+        <field name="perm_write">0</field>
+        <field name="perm_unlink">0</field>
+    </record>
     <record id="access_forwardport_batches" model="ir.model.access">
         <field name="name">No normal access to batches</field>
         <field name="model_id" ref="model_forwardport_batches"/>