Custom Roles

I am creating custom roles so that user has minimum possible permissions across Application. The requirement is that user can:

1. read messages across all extensions
2. view provisioning info of all users in company
3. read call logs of company

Note: The user would be accessing above data through APIs.

To achieve 2nd I got the section Users in User Management and for 3rd Company Call Log

But could not find any specific permission to achive 1st requirement. Can anyone please help on this ?

Thanks in advance.