I figured out my issue - I was in the wrong subscription when I ran the preview. sorry for the noise! I'm new to Pulumi and inherited a project where the infrastructure has drifted considerably, and I'm trying to update the Pulumi code to match. I'm getting this error:

PS C:\GitRepos\iac-pulumi\src\nvp-az-identity> pulumi preview
Previewing update (nvoicepay/production)

View Live: <https://app.pulumi.com/***/***-az-identity/production/previews/****>

     Type                         Name                        Plan       Info
     pulumi:pulumi:Stack          ***-az-identity-production             1 error
 +   ├─ pulumi:providers:azuread  Production                  create
 =   └─ azure:keyvault:KeyVault   ***-prod-global-keyvault    import     1 error

Diagnostics:
  pulumi:pulumi:Stack (***-az-identity-production):
    error: preview failed

  azure:keyvault:KeyVault (***-prod-global-keyvault):
    error: Preview failed: unrecognized resource type (Read): azure:keyvault/keyVault:KeyVault