Hello. Yes, you understood correctly. In fact, the rate limit is based on the API Key value and not the user. Cloud Endpoint (or Api Gateway today, which is the managed version of Cloud Endpoint with ESPv2) doesn’t support a per user rate limit.
For that, you need to use enterprise grade solution, such as Apigee.