Authentication works the same for both Analytics and YouTube as well as most Google APIs. The authentication page has some further information on this including the steps involved for authenticating users.
The access level (or privileges) your app will have is defined by a set of scopes you specify when the user authenticates with your app. Each API has their own set of scopes. The most basic scopes comes from the Google+ API, and you can find a list of them here.