Each user is assigned to one (and only one) Access Level, and this determines what basic privileges they have, or do not have.