Enable Azure Defender from the Azure portal
To enable all Security Center features including threat protection capabilities, you must enable Azure Defender on the subscription containing the applicable workloads. Enabling it at the workspace level doesn't enable just-in-time VM access, adaptive application controls, and network detections for Azure resources. In addition, the only Azure Defender plans available at the workspace level are Azure Defender for servers and Azure Defender for SQL servers on machines.
You can enable Azure Defender for Storage accounts at either the subscription level or resource level
You can enable Azure Defender for SQL at either the subscription level or resource level
You can enable Azure Defender for open-source relational databases at the resource level only
Please refer below link for more details
https://learn.microsoft.com/en-us/azure/security-center/enable-azure-defender
If the Answer is helpful, please click Accept Answer
and up-vote, this can be beneficial to other community members.