Use the following Class of Restrictions (COR) to prevent unauthorized observing.
For an observer, administer Can Be A Service Observer on the COR screen.
For an agent to be observed, administer Can Be Service Observed on the COR screen.
For an observer, grant permissions in Service Observing Permissions COR table on the COR screen.