You are correct about the security and access rights. As many accounts can be created as necessary with different privileges. It does work for both Rio and Avante.

Basically, you just assign the license to a computer MAC address instead of a user account in the Named Users section of the administration console. It does not change how the server itself is licensed. You can mix and match the two different types as much as you would like. Generally we set this up for central scanner type people who do not necessarily have or need a always on account.