pnp.sp.web.siteUsers – Gets all users from site collection.
What if the user is an Active Directory Group? Can it be written to expose those users?
Nope. It won’t expose the users under Active Directory group. It will only returns the users present in the Site Collection.