Correct, and judging from someone else in this thread, it was even possible to use wildcard matching to get access to an entire list of users at once.