OK. I was up pretty late last night but I'll take a swing at this.
The easiest way will be to have the users call into their extensions and when they hear their greetings playing hit * and then they should be asked to enter their extension and then their password. They should have access after that.
In order to get direct access to their voice mail the easiest thing I can think of would be to create a call handler whose action is to send subscriber to check in. You can assign an extension to the Call handler, and configure a free DID to get sent directly over to that call handler. Doing it this way would eliminate users having to wait for the phone to ring x number of times before they signed in.
These are the paths to get to each CCX logs through CLI. They may be helpful if you are having issues accessing RTMT or downloading logs through it.
If you want to download them you have to prefix "file get " and you can add one of the options (re...