When a separate FTP account is set up, am I correct in assuming this account only has access to the files in the directory as set up? For example, if I give access to the wwroot directory then access will be limited to the files in the wwroot directory.

Yes, that's correct.