Thanks all for the help
Here is what I finally did in the end, enjoy:
CALL VECTOR
Number: 91 Name: *SO EXT TEST
Multimedia? n Attendant Vectoring? n Meet-me Conf? n Lock? n
Basic? y EAS? y G3V4 Enhanced? y ANI/II-Digits? y ASAI Routing? y
Prompting? y LAI? n G3V4 Adv Route? y CINFO? y BSR? y Holidays? y
Variables? y
01 wait-time 0 secs hearing ringback
02 collect 7 digits after announcement 2508 for none
03 goto step 7 if digits = 1234567
04 collect 7 digits after announcement 2508 for none
05 goto step 7 if digits = 1234567
06 disconnect after announcement 2509
07 collect 6 digits after announcement 2512 for none
08 goto step 12 if digits in table 2
09 collect 6 digits after announcement 2512 for none
10 goto step 12 if digits in table 2
11 disconnect after announcement 2509
12 route-to digits with coverage n
13 stop
announcement 2508 = "Please enter your passcode"
announcement 2512 = "Please enter the feature access code plus the Agent's extension now."
announcement 2509 = "Sorry that is incorrect"
I ran the announcement twice in case the User "Fat Fingered" the first try. I could have it loop but then you open yourself up to letting an unauthorized person attempting various combinations until they succeed. In the VRT table I simply added the extensions preceeded by the FAC code. But where there were ranges of extensions like 4400 - 4499, to save time I simply put the fac number followed by wild cards like this: fac44??. This way any number from 4400 - 4499 would be valid.
Then I created a VDN with the COR set to allow service observe that can be dialed from off the switch and presto, anyone who knows the passcode and FAC+Agent extension can dial in from anywhere and listen-only to the Agent they want to.
Let me know what you think.
==========================================================
Does anyone have a quarter, I need to make a phone call?