Also, you can use ccaps for finer control.
E.g. Use a single Level 1 for page access, then use ccap to control everything else. The nice thing about that approach is you can control specific content on a page to specific ccaps. For example, we have a lecture notes page and members see the appropriate lecture notes based on a ccap. Works great.
You can download/upload the member list via csv to implement bulk modifications.