You stated that changing a user's access level cannot be done through an admin interface, but this is not the case.  I do not have access to the database; I make all my changes through the admin pages and like I said, we are ignoring Types for now.