lookup is designed to return the resources that the subject has permission on: in your example schema, the group does not have

own

permission (e.g. a check would fail), so it is not returned by lookup