Your sane assumption is correct. The image you added is just the capability to use the SOAP protocol. If you read the web services overview on your Moodle server you will get a good idea of how everything works:

http://<your moodle server>/admin/settings.php?section=webservicesoverview

Note also that each web service function includes capability checks for the user.