Security groups connect people or roles to the permissions needed for their responsibilities. Workday secures data sources and fields through domains, and some access is constrained to an organization's instances. A manager's permitted workers can therefore differ from the workers an HR analyst sees through the same report definition.
Separate the questions. Can the person find and run the report? Can that person read the source and each requested field? Can the person export it? A report shared successfully can still fail on a secured compensation field. The simulator's groups are fictional teaching roles, not a complete production security model. Diagnose the missing permission without suggesting broader access than the job requires. A copied spreadsheet also carries the responsibility to distribute its contents to an appropriate audience.