diff --git a/hr_holidays_public/__manifest__.py b/hr_holidays_public/__manifest__.py
index 8db8a32f..570f1c42 100644
--- a/hr_holidays_public/__manifest__.py
+++ b/hr_holidays_public/__manifest__.py
@@ -19,6 +19,7 @@
         "calendar_public_holiday",
     ],
     "data": [
+        "security/security.xml",
         "views/hr_leave_type.xml",
     ],
     "installable": True,
diff --git a/hr_holidays_public/security/security.xml b/hr_holidays_public/security/security.xml
new file mode 100644
index 00000000..78c8961c
--- /dev/null
+++ b/hr_holidays_public/security/security.xml
@@ -0,0 +1,45 @@
+<?xml version="1.0" encoding="utf-8" ?>
+<!-- Copyright 2024 Camptocamp
+     License AGPL-3.0 or later (http://www.gnu.org/licenses/agpl). -->
+<odoo>
+    <!-- add access for holidays manager -->
+    <record model="ir.model.access" id="access_calendar_public_holiday_manager">
+        <field name="name">access_hr_holidays_public_manager</field>
+        <field
+            name="model_id"
+            ref="calendar_public_holiday.model_calendar_public_holiday"
+        />
+        <field name="group_id" ref="hr_holidays.group_hr_holidays_manager" />
+        <field name="perm_read">1</field>
+        <field name="perm_write">1</field>
+        <field name="perm_create">1</field>
+        <field name="perm_unlink">1</field>
+    </record>
+    <record model="ir.model.access" id="access_calendar_public_holiday_line_manager">
+        <field name="name">access_calendar_public_holiday_line</field>
+        <field
+            name="model_id"
+            ref="calendar_public_holiday.model_calendar_public_holiday_line"
+        />
+        <field name="group_id" ref="hr_holidays.group_hr_holidays_manager" />
+        <field name="perm_read">1</field>
+        <field name="perm_write">1</field>
+        <field name="perm_create">1</field>
+        <field name="perm_unlink">1</field>
+    </record>
+    <record
+        model="ir.model.access"
+        id="access_calendar_public_holiday_manager_next_year"
+    >
+        <field name="name">access_calendar_public_holiday_next_year</field>
+        <field
+            name="model_id"
+            ref="calendar_public_holiday.model_calendar_public_holiday_next_year"
+        />
+        <field name="group_id" ref="hr_holidays.group_hr_holidays_manager" />
+        <field name="perm_read">1</field>
+        <field name="perm_write">1</field>
+        <field name="perm_create">1</field>
+        <field name="perm_unlink">1</field>
+    </record>
+</odoo>