AFAIK it's not part of the standard package "out of the box", so it'll require writing it from scratch.
But as Business version user you are able to give users (in this case your staff) access to limited information in the backend, where the limitations are set via ACL and can be narrowed down quite a bit. Haven't tried this particular scenario myself, but think that this way you have it already, just need to enable it. Additional benefit: while you're at it, you can give staff also access to certain other information such as reports and order/invoice particulars, or let them even edit certain limited details, i.e. update customers contact details, etc. It's quite powerful thanks to ACL.
only, your staff would not access this information through the frontend, but the backend instead. No problem thanks to the strict limitations you can set per user group, though.
Give it a try?