Automation doesn't send to group

So, to be clear:

  • I have ReportA which is shared to AllEmployees
  • I want to send it to EmployeeSubgroup

I still have to share the report to EmployeeSubgroup? It’s not enough that Employee1, who is in both EmployeeSubgroup and AllEmployees, has access through a group? She must have access through the “to” group?

(I.e. is report permission checked at the group, before it’s resolved into individual users? Or is the group resolved to users and then the users’ permissions checked?)