How does security in Narrative reporting translate to EPBCS

Summary:

In Narrative reporting, the access is by folder/report, and connections can be established to external data sources for report execution. How does this translate to EPBCS?

Content (please ensure you mask any confidential information):

If I have cell level security set up in EPBCS, and then an admin user builds a Narrative Reporting Connection to that EPBCS report and builds a report off of that EPBCS connection, what happens/how is the security handled if a regular user with cell level security applied to them in EPBCS runs that report? Does that report inherit the access of the admin who built the Connection and Report for EPBCS, or does Narrative Reporting somehow pass through the user running the report to check it against the EPBCS security?