Hi Johan,
I'm not sure, but no, I don't think you've got it.
When a user authenticates you can set their user level,
p_web.SetSessionLevel(x)
Then in the templates, where you see those Level settings, it's using p_web.GetSessionLevel and comparing against that.
What the levels "mean" and how they are allocated to users, is up to you.
cheers
Bruce