I found that all my domainusers can read the cubes in my Microsoft Analasys Services. I have no roles specifying that. Neither the domain admins nor the local admins contain any group that would contain unwanted users. The serveradmin role does not contain any entry. So I'm out of options. Is there any way to determine "how" or "due to which permission" a user accesses SSAS?
Things to mention: the datasource of the cubes use the system account (ImpersonateServiceAccount). But I would wonder if this has anything to do with the issue I have. The properties of the SSAS instance are all on default (except for the file paths).
Could this be related with NTFS permissions on the SSAS's files?