Hello Mike,
Thank you for your message.
Access permissions are set on the Host side, not the Viewer's. Yes, you right saying that there are global permissions for connection modes in Host settings:

However, you can also set user-specific permissions but in this case you must enable an authorization method that allows you to assign permissions to users. These are RU Security, Windows Security and Custom Server security. With Single password authorization though you won't be able to set permissions because there are no user accounts per se.
Here is an example on how to set permissions for a specific user in RU Security:

You can learn more about authorization methods
here.
Hope that helps.