Allow add implied groups from settings Only admin can edit admin [('id', '!=', 1)] res.groups.restricted