Your scenario is a challenge. We do not want the employee logging in as a system admin and listening to the CEO's recordings. As I see it, the only options are (1) limit the employee's access rights, or (2) remove the recordings from of the 3CX management console. I can not think of another built-in solution.
You may want to consider looking at our
3CX Recording Manager tool. Our tool can archive recordings outside of 3CX and optionally remove the original recording from 3CX. Access to the recordings is done through a separate web interface, and group rights (defined in 3CX) are honored so that an employee can only see recordings made by people they manage. That will solve your issue.
We also make it possible to add notes to a recording, score the agents handling of the call based on criteria you specify, selectively transcribe the entire recording, and now send recordings to services that can evaluate the effectiveness of your salesperson's approach. We also make it easy to see/modify which extensions are having all calls recorded without having to edit each extension individually, and we log all activities -- login, listen, email, download, delete (optional right). We have separate retention policies for the original recording and archived recordings.
Having the ability to get the recordings off the 3CX server reduces the size of your SSDs needed for high-speed storage, reduces the size of the hosted server, further restricts who has access to recordings, eliminates the ability for 3CX administrators to listen to private recordings, and blocks employees from deleting recordings when regulatory requirements require long-term retention.
