Windows 11 doesn’t have a single global “ask before download” permission, but you can get very close by changing how Windows Update and background downloads behave.
For Windows Updates, go to Settings, then Windows Update, then Advanced options. Turn on “Notify me when a restart is required” so nothing happens silently. More importantly, you can pause updates whenever you want from the main Windows Update page, which stops downloads entirely for the chosen period. If you want updates to wait for your approval every time, set your network connection to Metered. Go to Settings, Network & internet, select your current connection (Wi-Fi or Ethernet), then turn on Metered connection. On a metered connection, Windows will not automatically download most updates and will instead wait or prompt.
Alternatively, you can disable Automatic downloads - although I wouldn't recommend it for security reasons. For details, refer to https://learn.microsoft.com/en-us/answers/questions/3922938/how-can-i-stop-windows-from-automatically-updating
You can also limit background downloads. In Settings, go to Windows Update, Advanced options, then Delivery Optimization. Turn off “Allow downloads from other PCs” and optionally go into Advanced options there to limit how much bandwidth Windows is allowed to use. This doesn’t force a permission prompt, but it prevents silent, heavy downloading.
For Microsoft Store app updates, open the Microsoft Store, click your profile icon, go to Settings, and turn off App updates. That makes Store apps update only when you manually approve them.
If the above response helps answer your question, remember to "Accept Answer" so that others in the community facing similar issues can easily find the solution. Your contribution is highly appreciated.
hth
Marcin