diff --git a/spreadsheet_oca/models/spreadsheet_spreadsheet.py b/spreadsheet_oca/models/spreadsheet_spreadsheet.py
index 5c56917e..6f8bd740 100644
--- a/spreadsheet_oca/models/spreadsheet_spreadsheet.py
+++ b/spreadsheet_oca/models/spreadsheet_spreadsheet.py
@@ -29,6 +29,13 @@ class SpreadsheetSpreadsheet(models.Model):
         column2="user_id",
         string="Contributors",
     )
+    contributor_group_ids = fields.Many2many(
+        "res.groups",
+        relation="spreadsheet_group_contributor",
+        column1="spreadsheet_id",
+        column2="group_id",
+        string="Contributors Groups",
+    )
     reader_ids = fields.Many2many(
         "res.users",
         relation="spreadsheet_reader",
@@ -36,6 +43,19 @@ class SpreadsheetSpreadsheet(models.Model):
         column2="user_id",
         string="Readers",
     )
+    reader_group_ids = fields.Many2many(
+        "res.groups",
+        relation="spreadsheet_group_reader",
+        column1="spreadsheet_id",
+        column2="group_id",
+        string="Readers Groups",
+    )
+
+    company_id = fields.Many2one(
+        comodel_name="res.company",
+        help="If set, the spreadsheet will be available only"
+        " if this company is in the current companies.",
+    )
 
     @api.depends("name")
     def _compute_filename(self):
diff --git a/spreadsheet_oca/security/security.xml b/spreadsheet_oca/security/security.xml
index 6b7998af..3344672c 100644
--- a/spreadsheet_oca/security/security.xml
+++ b/spreadsheet_oca/security/security.xml
@@ -20,6 +20,12 @@
             eval="[(4, ref('base.user_root')), (4, ref('base.user_admin'))]"
         />
     </record>
+
+    <record model="ir.rule" id="spreadsheet_company_rule">
+        <field name="name">Spreadsheet Company Rule</field>
+        <field name="model_id" ref="model_spreadsheet_spreadsheet" />
+        <field name="domain_force">[('company_id', 'in', company_ids + [False])]</field>
+    </record>
     <record model="ir.rule" id="spreadsheet_owner_rule">
         <field name="name">Spreadsheet Owner</field>
         <field name="model_id" ref="model_spreadsheet_spreadsheet" />
@@ -30,7 +36,9 @@
         <field name="name">Spreadsheet Contributor</field>
         <field name="model_id" ref="model_spreadsheet_spreadsheet" />
         <field name="groups" eval="[(4, ref('spreadsheet_oca.group_user'))]" />
-        <field name="domain_force">[('contributor_ids','=', user.id)]</field>
+        <field
+            name="domain_force"
+        >['|', ('contributor_ids','=', user.id), ('contributor_group_ids','in', user.groups_id.ids)]</field>
         <field name="perm_create" eval="False" />
         <field name="perm_unlink" eval="False" />
     </record>
@@ -38,7 +46,9 @@
         <field name="name">Spreadsheet Reader</field>
         <field name="model_id" ref="model_spreadsheet_spreadsheet" />
         <field name="groups" eval="[(4, ref('spreadsheet_oca.group_user'))]" />
-        <field name="domain_force">[('reader_ids','=', user.id)]</field>
+        <field
+            name="domain_force"
+        >['|', ('reader_ids','=', user.id), ('reader_group_ids','in', user.groups_id.ids)]</field>
         <field name="perm_write" eval="False" />
         <field name="perm_create" eval="False" />
         <field name="perm_unlink" eval="False" />
diff --git a/spreadsheet_oca/views/spreadsheet_spreadsheet.xml b/spreadsheet_oca/views/spreadsheet_spreadsheet.xml
index 7d289c3e..cc19ca29 100644
--- a/spreadsheet_oca/views/spreadsheet_spreadsheet.xml
+++ b/spreadsheet_oca/views/spreadsheet_spreadsheet.xml
@@ -19,6 +19,7 @@
         <field name="arch" type="xml">
             <tree js_class="spreadsheet_tree">
                 <field name="name" />
+                <field name="company_id" groups="base.group_multi_company" />
                 <button
                     name="open_spreadsheet"
                     type="object"
@@ -48,15 +49,32 @@
                         <field name="name" placeholder="Name" />
                     </h1>
                     <group>
-                        <field name="owner_id" />
-                        <field name="contributor_ids" widget="many2many_tags" />
-                        <field name="reader_ids" widget="many2many_tags" />
-                        <field
-                            name="data"
-                            filename="filename"
-                            groups="base.group_no_one"
-                        />
-                        <field name="filename" invisible="1" />
+                        <group colspan="4">
+                            <field name="owner_id" />
+                            <field
+                                name="company_id"
+                                groups="base.group_multi_company"
+                            />
+                        </group>
+                        <group string="Write Access">
+                            <field name="contributor_ids" widget="many2many_tags" />
+                            <field
+                                name="contributor_group_ids"
+                                widget="many2many_tags"
+                            />
+                        </group>
+                        <group string="Read Access">
+                            <field name="reader_ids" widget="many2many_tags" />
+                            <field name="reader_group_ids" widget="many2many_tags" />
+                        </group>
+                        <group colspan="4">
+                            <field
+                                name="data"
+                                filename="filename"
+                                groups="base.group_no_one"
+                            />
+                            <field name="filename" invisible="1" />
+                        </group>
                     </group>
                 </sheet>
             </form>