Controlling who can use OUS Hub¶
By default, every Odoo user who has the add-in in Outlook can sign in to OUS Hub. To choose who can use it from inside Odoo, create one user group. No Odoo module or code change is needed.
This works alongside your Microsoft 365 settings, it doesn't replace them:
- Microsoft 365 decides who gets the add-in in Outlook.
- Odoo decides who can sign in to it with your Odoo database.
Turn on access control¶
You need an Odoo system administrator account.
- Turn on developer mode. Go to Settings, scroll to the bottom and click Activate the developer mode.
- Go to Settings → Users & Companies → Groups and click New.
- In Name, type exactly:
OUS Hub Users
Capital letters and spaces must match exactly. Leave Application empty. 4. Open the Users tab and add everyone who should be able to use OUS Hub. 5. Save.
That's it. From now on, only members of OUS Hub Users can sign in. Anyone else sees:
Access Denied: Ask your Odoo administrator to add you to the "OUS Hub Users" group.
Important: create a new group with this name. Don't rename an existing group, especially if your Odoo is in a language other than English. A renamed group may not be recognised, and then access control stays off.
Giving someone access¶
Add them to the OUS Hub Users group. They can sign in straight away: they just click Sign in in the OUS Hub pane.
Removing someone's access¶
Remove them from the OUS Hub Users group. They are signed out within 24 hours, the next time OUS Hub checks their sign-in.
To cut off access immediately, also do one of these in Odoo:
- delete the API key the user signs in to OUS Hub with (Odoo 14 and later), or
- archive the user. This also stops them signing in to Odoo itself.
Turning access control off¶
Delete the OUS Hub Users group. Everyone with the add-in can sign in again.
Good to know¶
- Licence seats: a user who is refused never uses a seat on your licence.
- What users can do in Odoo doesn't change. This group only controls who can use OUS Hub. Inside OUS Hub, people can still only see and create what their normal Odoo access rights allow. For example, someone without CRM access still can't create leads.
- Groups that include other groups: if another group is set to include OUS Hub Users, that group's members get access too.
- Works on every Odoo version OUS Hub supports, on Odoo.sh and self-hosted.
Troubleshooting¶
Everyone can still sign in after I created the group
- Check the name is exactly
OUS Hub Users: same capitals, no extra spaces, no spelling mistakes. - If you renamed an existing group, delete it and create a new one with the right name instead.
- People who were already signed in keep access for up to 24 hours (see Removing someone's access).
I can't find the Groups menu
Developer mode is off. See step 1 above.
I added someone but they still see the "no access" message
Check you saved the group, then ask them to click Sign in again.