You must set the permissions for the fop2 user. When using fop2admin, log into freepbx, select fop2 users, and set permissions accordingly for the user you are login in as. If you want to give full permissions, set it to "all".

fop2.cfg

user=10191:123:all
user=10194:123:dial,transfer,spy,hangup,pickup,record,meetme,queuemanager,queueagent,hangupself,recordself,preference,all

/etc/asterisk/manager.conf

read = system,call,command,agent,user,originate,dialplan,all
write = system,call,command,agent,user,originate,dialplan,all

Individual permissions in the fop2 toolbar are controlled by fop2 user permissions. And the fop2 permissions are controlled not just by user lines in fop2.cfg but also potential autoexec scripts that might be invoked in that script.

Do you use freepbx? Do you have a last #exec line at the end of fop2.cfg ? If you have a last #exec line, that line is generating a bunch of user lines that are overriding whatever you had written BEFORE. If you want to perform a manual configuration, remove the #exec line. If you do use freepbx, my suggestion is to leave the #exec line, remove all your manual user= lines or any other setting, and handle all via freepbx fop2admin.

Best regards,

transferexternal is the fop2 permission name for transfer to mobile to work/show.