have not seen any front end, but assuming anything possible via a database in the backend, just need to know which commands to run, duplicate, or make changes at scale
One way might be in the front end is to create a custom role with permission you want then assign it to Agent(s):

It allows to select multiple agents to reset their permission or change Department, but not make changes:
