diff --git a/fusion_plating/fusion_plating_shopfloor/data/fp_tablet_kiosk_user.xml b/fusion_plating/fusion_plating_shopfloor/data/fp_tablet_kiosk_user.xml
new file mode 100644
index 00000000..123125b9
--- /dev/null
+++ b/fusion_plating/fusion_plating_shopfloor/data/fp_tablet_kiosk_user.xml
@@ -0,0 +1,17 @@
+<?xml version="1.0" encoding="utf-8"?>
+<odoo noupdate="1">
+    <!-- Tablet kiosk user. noupdate="1" so manual password changes via
+         the user form aren't reverted on -u. The post-migrate hook
+         generates a random password on first install and stores it
+         in ir.config_parameter for sysadmin retrieval. -->
+    <record id="user_fp_tablet_kiosk" model="res.users">
+        <field name="login">fp_tablet_kiosk@enplating.local</field>
+        <field name="name">Tablet Kiosk</field>
+        <field name="active" eval="True"/>
+        <field name="share" eval="False"/>
+        <field name="group_ids" eval="[
+            (4, ref('base.group_user')),
+            (4, ref('fusion_plating_shopfloor.group_fp_tablet_kiosk')),
+        ]"/>
+    </record>
+</odoo>