odoo16/addons/google_calendar/security/google_calendar_security.xml

<odoo>
    <data noupdate="1">
        <record id="google_calendar_not_own_token_rule" model="ir.rule">
            <field name="name">Google Calendar NOT own token access rule</field>
            <field name="model_id" ref="model_google_calendar_credentials"/>
            <field name="domain_force">[('user_ids', 'not in', user.id)]</field>
            <field name="groups" eval="[(4, ref('base.group_user'))]"/>
            <field name="perm_create" eval="0"/>
            <field name="perm_write" eval="0"/>
            <field name="perm_unlink" eval="0"/>
            <field name="perm_read" eval="1"/>
        </record>
        <record id="google_calendar_own_token_rule" model="ir.rule">
            <field name="name">Google Calendar own token access rule</field>
            <field name="model_id" ref="model_google_calendar_credentials"/>
            <field name="domain_force">[('user_ids', 'in', user.id)]</field>
            <field name="groups" eval="[(4, ref('base.group_user'))]"/>
            <field name="perm_create" eval="0"/>
            <field name="perm_write" eval="1"/>
            <field name="perm_unlink" eval="0"/>
            <field name="perm_read" eval="1"/>
        </record>
        <record id="google_calendar_token_system_access" model="ir.rule">
            <field name="name">Google Calendar manage all tokens</field>
            <field name="model_id" ref="model_google_calendar_credentials"/>
            <field name="domain_force">[(1,'=',1)]</field>
            <field name="groups" eval="[(4, ref('base.group_system'))]"/>
        </record>
    </data>
</odoo>