Uma uses the value of $permissionLevel (set in authenticator.php) to determine if the user logging in has a high enough permission to access the page. The user's permissions are stored in the Perm table, and can be set using the Uma admin tool. Access is granted for users who have a permission greater than or equal to the value assigned to $permissionLevel in authenticator.php. User's can have different levels of permissions for different services.