User security and cubeview performance

Hello dbeavon,

In a vacuum, Cube View rendering times should not have any impact based on roles such as Admin and Non-Admin.  Cube View rendering is impacted by many things ( Cube View design, data volumes, high traffic server activity, complex security model, etc. ).  This being said, I offer a couple possible explanations for why you may be seeing a difference between Administrators and Non-Admins.

1.  Cube View execution happening on different General Application Servers

• In the Azure environment, when a Cube View is executed, the Cube View execution request is assigned to an Application Server that is assigned for General Access.  When a Cube View executes, it will consume 1 CPU on the General Application Server until the Cube View completes the execution.  If you have 2 Application Servers marked as General, you could have a situation that when you execute your Cube View as an Admin, you execute on Gen Server 1.  Others may have been assigned to Gen Server 2.  Depending on the task activity on the Gen Server 2, it could impact Cube View rendering performance.  For troubleshooting purposes, have you checked the Task Activity log to see which Cube Views are executing on which Application Servers?  Then identify if there is a difference in servers between when you execute as an Admin vs. Non-Admins?  Meaning do you have a traffic logjam in which Cube View queueing is happening or is it potential hardware limitations on a specific server.  

2.  Complex Security Model for Non-Admins

• As an Administrator, when you execute a Cube View, the system knows not to check security for the data as an Administrator gets access to virtually everything in OneStream.  When you are a non-Admin, there is going to be security checks in order to return the authorized set of data for the user.  So if you have unique security groups set on every OneStream object, in addition to Read access to Entity data, and finally have slice security to only a subset of data within the Entity, then you have a lot of checkpoints for security to get through before the final results of data are shown in a Cube View.  

If you continue to have questions, I would suggest submitting a ticket and discussing with OneStream Technical Support.  Not sure if your inquiry is technical or application related in nature.  OneStream Support expertise can help out here.