I think the setting should be OK. My test use does only get download visio, but my admin user can edit. In both cases cube was connected to the same DMA and from the same client PC.