Thank you mobilowa. This set up I already have, but when agent in group1 (which has disabled "perform operations divert, transfer, pickup" )receives an external call on android device he is able to transfer to any avaiable extension he knows, even to an extensions that are cannot receive calls from him. There must be an another solution how to block it. Anyway thank you very much!