permisson

I need to find a way to allow a Compliance person to access the CDR, and to listen to recorded calls on all extensions except for company owners and executives. I know access can be modified through Group Permissions and then I can just assign the specific extensions the person needs access to...