In Odoo 17, new users are typically assigned to the Internal User group by default, which grants them extensive permissions. The issue is that this group provides too many rights, and when new extensions are installed, additional permissions are automatically granted to the user. To address this, it is necessary to assign new users to a group with restricted capabilities.

How can this be achieved? I tried to copy 'Internal User' group but I after selecting it (picture bellow) I can't see access rights, and logged in user has only portal rights.