Yes, you can build a script that only certain extensions can dial via feature code. You could have it prompt the admin for an extension number and then have it either logout or pause that extensions (or offer the choice).
Using custom dialplan to run script - FreePBX / Development - FreePBX Community Forums
Custom Destinations Module - PBX GUI - Documentation (freepbx.org)