asterisk users - Sep 2005 - Extension Restrictions

Is it possible to define an extension that is not allowed to make or  
receive calls, unless an agent logs in? Obviously it would require  
that the extension be able to dial the # for the agent to log in.

Thanks,
Waldo