Pulumi does not seem to locate a resource group outside of the current stack's subscription. While trying to set up access policies for an existing KeyVault with Pulumi, I get an error that says

resource group not found

. despite that the keyVault id contains the full resource id (with the subscription)

Try creating a new instance of an Azure provider in your code and passing the subscription ID to its arguments.

Thanks, I'll give it a try Apologies for the late response