Call Manager Security Profile without incoming Routing profile calls

For the Call Manager need to have Monitor functionalities , but need to exclude the call incoming from the routing profile queues, whether any other ways available to do it?

We can remove the CCP Access, but it removing the monitoring functionalities too