diff --git a/addons/portal/__openerp__.py b/addons/portal/__openerp__.py
index 012403a1a52..eb6d9405a92 100644
--- a/addons/portal/__openerp__.py
+++ b/addons/portal/__openerp__.py
@@ -38,7 +38,10 @@ module 'share'.
     """,
     'website': 'http://www.openerp.com',
     'demo_xml': [],
-    'data': ['portal_view.xml', 'wizard_view.xml'],
+    'data': [
+        'security/portal_security.xml', 'security/ir.model.access.csv',
+        'portal_view.xml', 'wizard_view.xml',
+    ],
     'installable': True,
     'certificate' : '',
 }
diff --git a/addons/portal/security/ir.model.access.csv b/addons/portal/security/ir.model.access.csv
new file mode 100644
index 00000000000..343b051c72d
--- /dev/null
+++ b/addons/portal/security/ir.model.access.csv
@@ -0,0 +1,7 @@
+"id","name","model_id:id","group_id:id","perm_read","perm_write","perm_create","perm_unlink"
+"access_all","access.portal.all","model_res_portal",,1,0,0,0
+"access_widget_all","access.portal.widget.all","model_res_portal_widget",,1,0,0,0
+"access_manager","access.portal.manager","model_res_portal","group_portal_manager",1,1,1,1
+"access_widget_manager","access.portal.widget.manager","model_res_portal_widget","group_portal_manager",1,1,1,1
+"access_wizard_officer","access.portal.wizard.officer","model_res_portal_wizard","group_portal_officer",1,1,1,1
+"access_wizard_user_officer","access.portal.wizard.user.officer","model_res_portal_wizard_user","group_portal_officer",1,1,1,1
diff --git a/addons/portal/security/portal_security.xml b/addons/portal/security/portal_security.xml
new file mode 100644
index 00000000000..015a390cdae
--- /dev/null
+++ b/addons/portal/security/portal_security.xml
@@ -0,0 +1,13 @@
+<?xml version="1.0" encoding="utf-8"?>
+<openerp>
+    <data noupdate="1">
+        <record id="group_portal_manager" model="res.groups">
+            <field name="name">Portal / Manager</field>
+            <field name="comment">Portal managers have access to the portal definitions, and can easily configure the users, access rights and menus of portal users.</field>
+        </record>
+        <record id="group_portal_officer" model="res.groups">
+            <field name="name">Portal / Officer</field>
+            <field name="comment">Portal officers can create new portal users with the portal wizard.</field>
+        </record>
+    </data>
+</openerp>
diff --git a/addons/portal/wizard_view.xml b/addons/portal/wizard_view.xml
index 86a789e760c..bd7a8b553a0 100644
--- a/addons/portal/wizard_view.xml
+++ b/addons/portal/wizard_view.xml
@@ -7,7 +7,8 @@
             src_model="res.partner"
             res_model="res.portal.wizard"
             view_type="form" view_mode="form"
-            key2="client_action_multi" target="new"/>
+            key2="client_action_multi" target="new"
+            groups="group_portal_officer"/>
 
         <!-- wizard action on res.partner.address -->
         <act_window id="address_wizard_action"
@@ -15,7 +16,8 @@
             src_model="res.partner.address"
             res_model="res.portal.wizard"
             view_type="form" view_mode="form"
-            key2="client_action_multi" target="new"/>
+            key2="client_action_multi" target="new"
+            groups="group_portal_officer"/>
 
         <!-- wizard view -->
         <record id="wizard_view" model="ir.ui.view">