...
Step 1: Create Admin account
Create 'Supervisor' Admin with only Group Permissions as Read/Write
Expand 'Extensions' permissions
Manage set to 'Read Only'
Groups set to 'Read/Write'
All others can be set to either None or Read Only
Step 2: Create Groups.
Step 3: Create Call Queues set up with Call Queues Agent Members set up to use Extension Groups