Permissions were always tricky in SharePoint. For many years there was no such a thing as permissions report – we had to use 3-rt party tools – like MetaLogix or ShareGate. Finally Microsoft implemented Site Permissions Report in SharePoint Online.
Here is an awesome video on how to get full SharePoint site collection permissions report: