You can remove the `global $user`. og_user_access_entity will pull the global $user if no object user was supplied.