Hello,
Your point of view is correct. You need to purchase two licenses: a server license and a CAL license.
The server license is for the use of the thing itself, and the CAL is what each client will need to access it.
If you have found my answer helpful, I would appreciate it if you would press the helpful button.
Best regards,
Yu