Users unable to determine who has access to document library due to security groups

Do not add individual permissions to compensate. Check inheritance under Site permissions, inspect the target group in Microsoft Entra, and use SharePoint Check Permissions for each affected user. Record nested-group membership separately and compare it with audit logs so least privilege is preserved while the effective access path is documented.