Queries with thousands of roles

I have an app for companies to manage their clients and subscribers, one company has 11k customers, and the company has its ACL and each user has his ACL, the company ACL is inside each customer’s ACL.
But for each request, the server is loading all these 11k ACLs to make a Get and is doing a contained in on _rperms. Is this correct usage? The Mongo CPU is at its limit with a few requests and Parse.Role is using all the CPU.

some recommendation?

I would detect this client and query using the masterkey. Then I’ll filter the results. You have to be a bit carful, but it’s worth it, I think.