There are two ways to accomplish that
1- On your outbound route settings, you should add the rule with the CallerID numbers that are allowed to use that route.
2- Use Custom context modules where you can allow/deny routes to groups of extensions.
As you have only 14 extensions the simplest method is #1.
Hope it helps!