A successful query as ACCOUNTADMIN doesn't prove that a reporting role can run it. Test the role that the report will use. Reading a table requires USAGE on its database and schema, SELECT on the object, and a usable warehouse for compute. Each grant solves a separate part of that chain.
Grant only what the task requires. A product catalog reader doesn't need every sales table, and a role that can read a table doesn't need permission to update it. SHOW GRANTS lists the direct grants so you can inspect the permission scope. Role inheritance can supply additional privileges, so trace the role hierarchy as well when evaluating an existing account. These exercises use a new custom role to make the direct grants explicit.