Here is a great post by Rod in regards to doing this exact scenario.
http://www.rodcolledge.com/rod_colledge/2010/10/ssas-dynamic-security-kerberos-and-performancepoint.html
If you are unable to do the Per User security setup and Kerberos another option is to explore the CustomData setup within SSAS and PerformancePoint.
If everything is running on a single server you should be able to do Per User security setting and no Kerberos will be required, just depends on your server configuration.
