vicidial.org

Can you 1)limit which agent is allowed to do monitoring 2)limit which user groups they can monitor
When I click Admin>Phones>Modify
there is a setting:
Admin Monitor but that sounds entirely different (more like the use of training and transferring)
Currently managers press 0+session id allowing them to monitor (this would of course be done on a softphone like xlite)... however agents can also do the same using their phone login.

Have you read the Vicidial Manager's Manual (Available from EFLO.net) ... this document is created to avoid reprinting the information in it hundreds of times in posts.

You did a great job posting your specs ... so I hate doing that to you as it would appear likely you've read the manual, but I feel fairly certain this information is in there and you made no mention of having read the manual.

I presume you've checked the User and User Group settings AND read the manual regarding these options ...?

lol, of course I've read the manual curious as to how many times you've referenced something not in there (however I do have the 2.2)
Not sure if this can even be stopped, if you can do this completely outside of vici... but the phones are created within vici.

If I take xlite, without logging in but use a phone created called 2000, I dial 0+session ID of anyone on the real time display and I can listen in as can the agents. Now this particular phone is created for a user in a user group with access to a campaign another user group has access to as well, but separate user groups. So in user groupe they have only their user group selected for allowed user group. (Not sure how user group would affect phone at all though since there is nothing tying phones to user groups, except ADMIN of phone and that doesn't limit who they can monitor).
lmk if I'm missing something (praying it's something your going to shun me for)

I thought you were right, that this was not covered in the manual,
so I started to look in the manual and to my surprise I found that a answer is there
but not in the words you might be looking for.

Vicidial Manager manual 2.4 (version 2012-04-29) page 18. "B. Add a new SIP or IAX phone to the system:"

NOTE: for additional security, change “Phone Context” to phones. This disables the ability
for agents to make calls directly from the phones, they must log into a campaign in the dialer.
This also adds another layer of security against hackers that may attempt to register their own
phones to your dialer.

You may want to suggest that The Vicidial Group create a "security index" inside the manual and suggest several links/references to place in it. Seems to me that this particular reference, properly implemented, would be quite useful. Also helpful for Multi-Tenant I'm sure.