We should ensure that users being exported are enrolled on the course being exported from. In courses where the current user can't access all groups we should ensure that users being exported belong to the same groups as them.