2 things i'd do:
- Creating the order as a customer. TO see if CC fields do pop there - they should.
- Creating another order as an employee (if the plan is that employees create orders) and setting the order status to pending approval and see if customer role can edit it then and add cc details.