Yvgeni - we have a single permission to authorize monitoring of users: Conversation Call Monitor. This is a division aware permission, meaning you will need a role with access to the appropriate divisions to match those of the agents you wish to monitor. There is nothing specifically controlling monitoring a specific user, phone, or queue however.
If you are in need of additional functionality, best to open an idea in the ideas lab and we can review it. I believe there have been some requests in the past to limit monitoring at the queue-level but its not anything we currently have planned.
------------------------------
Chris Bohlin
Sr. Director - Product Management
Genesys Cloud
------------------------------