Permissions and approvals
In Permisos (Permissions), an admin decides, tool by tool, what the Copilot does in your Odoo: Permitir (Allow: it does it without asking), Preguntar (Ask: it proposes the change and waits for your approval) or Bloquear (Block: it doesn't use it). Above all of this, your user's Odoo permissions always prevail.
Requirements
| Who changes it | The owner or an admin of the space. Members see the permissions but can't change them. |
|---|---|
| Where | Copiloto (Copilot) → Permisos. |
| Who it affects | The whole space, only in the Copilot. MCP Connect doesn't change: it's read-only. |
The three options
| Option | For reads | For writes |
|---|---|---|
| Permitir | The Copilot uses it. | Odoo validates the change and it's applied right away. You see it in the chat and it stays in the history. With files in the conversation, it acts as Preguntar. |
| Preguntar | — | Approval card in the chat and in Aprobaciones (Approvals). It's only applied when the person who asked for it clicks Aprobar (Approve). |
| Bloquear | The Copilot doesn't see it. | The Copilot doesn't see it and can't propose it. |
Important: With Permitir, the change the Copilot proposes is applied without a card. The text of Odoo records (descriptions, outside emails, notes) could try to steer it: sensitive fields (bank accounts, users, taxes, portal tokens…) are always blocked, and Permitir never acts alone with files in the conversation. If you want to review every change, use Preguntar.
Each group (Read and Write) has its own setting, and each tool can have its own: the Propio (Custom) label appears, with the Restablecer (Reset) button to go back to the group's setting. When you change a group, its tools follow it again.
Write permissions
| Permission | Options | Default |
|---|---|---|
| «Crear y modificar registros» (Create and update records) | Permitir, Preguntar, Bloquear | Preguntar |
| «Borrar registros» (Delete records) | Preguntar, Bloquear | Bloquear |
| «Notas en el chatter» (Notes in the chatter) | Preguntar, Bloquear | Preguntar |
| «Publicar facturas» (Post invoices) | Preguntar, Bloquear | Preguntar |
| «Registrar pagos» (Register payments) | Preguntar, Bloquear | Preguntar |
| «Importar extractos» (Import statements) | Preguntar, Bloquear | Preguntar |
| «Enviar facturas» (Send invoices) | Preguntar, Bloquear | Preguntar |
| «Enviar emails a clientes» (Email customers) | Preguntar, Bloquear | Preguntar |
| «Compartir enlace del portal» (Share a portal link) | Preguntar, Bloquear | Preguntar |
| «Revocar enlace del portal» (Revoke a portal link) | Preguntar, Bloquear | Preguntar |
Deleting, notes in the chatter, posting invoices, registering payments, importing statements, sending invoices, sending emails and sharing or revoking portal links never happen without approval: even if you set the whole Write group to Permitir, these stay on Preguntar.
Approve a proposal
- Read the card: which record, which values (before and after) and the checks against Odoo. If it comes from a document, you have the document next to it.
- Click Aprobar… to apply it or Rechazar (Reject) to discard it. Actions that you can't undo from here (delete, post, send) have a red button.
- Right before applying, it's checked against Odoo again. If the record changed since the proposal, it's not applied and the card says so.
| Card status | What it means |
|---|---|
| Pendiente de tu aprobación (Awaiting your approval) | Waiting for you to decide. It expires after 24 hours. |
| Aplicado en Odoo (Applied in Odoo) | Done, with your Odoo user. |
| Rechazado (Rejected) | You discarded it. |
| Caducado (Expired) | 24 hours went by without a decision. |
| No aplicado: el registro cambió (Not applied: the record changed) | Someone changed the record in Odoo after the proposal. |
| No aplicado (Not applied) | Odoo rejected it. The card says why and, if an Odoo permission or some setup is missing, links to Ver requisitos (See requirements). |
Troubleshooting
Quoted text is exactly what the app shows, in Spanish, followed by what it means. When the Copilot can't propose something, it explains why in the chat, in its own words.
| What you see | Why | What to do |
|---|---|---|
| «Un administrador ha bloqueado este tipo de cambio.»Means: An admin has blocked this type of change. | An admin blocked that permission after the proposal. | Ask an admin to change it in Permisos. |
| «La propuesta ha caducado. Pide al Copiloto que la rehaga.»Means: The proposal has expired. Ask the Copilot to redo it. | 24 hours went by. | Ask for the change again. |
| «Esta propuesta ya está decidida.»Means: This proposal has already been decided. | It was already approved or rejected (for example, in another tab). | Reload the page. |
| «Tu usuario de Odoo no tiene permiso para esta operación. Pide a quien administra tu Odoo que te dé acceso.»Means: Your Odoo user doesn't have permission for this operation. Ask whoever administers your Odoo to give you access. | Your Odoo user doesn't have that permission in Odoo. | Click Ver requisitos on the card: it says which Odoo group you need. |
| «El registro cambió en Odoo después de la propuesta. Pide al Copiloto que la rehaga.»Means: The record changed in Odoo after the proposal. Ask the Copilot to redo it. | The record changed in Odoo since the proposal. | Ask the Copilot to redo it. |
| «Conecta tu usuario de Odoo para aplicar cambios.»Means: Connect your Odoo user to apply changes. | Your personal connection is missing or needs renewing. | Connect your Odoo user. |
| «Solo un administrador del espacio puede cambiar los permisos. Los ves como están configurados.»Means: Only a space admin can change the permissions. You see them as they are set up. | You're a member of the space. | Ask an admin for the change. |