Hi Craig,
We're working through this one at the moment (and have attempted to do the same in the past) and we're not having much luck.
Like you, we're able to allow the user to call the shared voicemail and login (they prefer password access on all their phones for VM, so that bit is Ok for us...