The queue restriction is read from the freepbx queue configuration itself, if you set dynamic agents for a queue and check "restrict dynamic agents" , then only those dynamic agents will be allowed to be added/removed from that queue. You do not need to modify any configuration in the fop2admin module itself, the queuechannel directive and the restrictqueue directives will be set accordingly to that.
You can also create custom permissions where you can restrict actions to a particular group, but you do not need to do that for enabling queue restrictions.
However, for your needs, you can very well use fop 2.20 and just create a group with all buttons except for the queues you do not want to manage. And then assign that group to every fop2 users, that way they will not see the queues they are not supposed to manage.
If you are brave and want to try the beta features, you can create a fop2 group that contains ONLY your dynamic queue, then you must create a custom permission, put it a name like "myqueue" , include the queuemanager permission, and apply it to a group that contains only your dynamic queue. Then assign "myqueue" permission to your users, instead of the regular queuemanger. That way, users will be able to add/remove only to your dynamic queue.
Best regards,