Enable Microsoft Defender for Azure AI Foundry

01 Sign in to the Microsoft Azure Portal.

02 Navigate to Microsoft Defender for Cloud blade available at https://portal.azure.com/#view/Microsoft_Azure_Security/SecurityMenuBlade/~/0.

03 In the left navigation panel, under Management, choose Environment settings.

04 Under Azure and Tenant Root Group, click on the name (link) of the Azure subscription that you want to examine.

05 In the left navigation panel, under Settings, choose Defender plans to access the Defender for Cloud pricing plans available for the selected Azure subscription.

06 In the Cloud Workload Protection (CWPP) section, check the pricing plan status listed in the Status column for the AI Services plan. If the pricing plan status for AI Services is set to Off, Microsoft Defender for Cloud is not enabled for the Azure AI Foundry resources available in the selected subscription.

07 Repeat steps no. 4 – 6 for each Azure subscription created within your Microsoft Azure account.

01 Run account list command (Windows/macOS/Linux) with custom output filters to list the IDs of the cloud subscriptions available in your Azure cloud account:

az account list
	--query '[*].id'

02 The command output should return the requested subscription identifiers (IDs):

[
	"abcdabcd-1234-abcd-1234-abcdabcdabcd",
	"abcd1234-abcd-1234-abcd-abcd1234abcd"
]

03 Run account set command (Windows/macOS/Linux) with the ID of the Azure cloud subscription that you want to examine as the identifier parameter to set the selected subscription to be the current active subscription (the command does not produce an output):

az account set
	--subscription abcdabcd-1234-abcd-1234-abcdabcdabcd

04 Run security pricing list command (Windows/macOS/Linux) with custom output filters to describe the name of the Microsoft Defender for Cloud pricing plan configured for AI Foundry resources, in the selected Azure subscription:

az security pricing list
	--query 'value[?(name==`AI`)].pricingTier'

05 The command output should return the pricing plan (tier) configured for the AI Foundry resources:

[
	"Free"
]

06 Repeat steps no. 3 - 5 for each Azure subscription available in your Microsoft Azure cloud account.

01 Sign in to the Microsoft Azure Portal.

02 Navigate to Microsoft Defender for Cloud blade available at https://portal.azure.com/#view/Microsoft_Azure_Security/SecurityMenuBlade/~/0.

03 In the left navigation panel, under Management, choose Environment settings.

04 Under Azure and Tenant Root Group, click on the name (link) of the Azure subscription that you want to configure.

05 In the left navigation panel, under Settings, choose Defender plans to access the Defender for Cloud pricing plans available for the selected Azure subscription.

06 In the Cloud Workload Protection (CWPP) section, perform the following actions:

1. Choose On for the AI Services pricing plan, in the Status column, to enable Microsoft Defender for Cloud for the Azure AI Foundry resources.
2. Choose Settings > for the AI Services pricing plan, in the Monitoring coverage column, and make sure that all the plan components (extensions) are turned on. Choose Continue to return to the Defender plans page.
3. Choose Save from the top menu to apply the changes.

07 Repeat step no. 4 – 6 for each Azure subscription available in your Microsoft Azure cloud account.

01 Run account list command (Windows/macOS/Linux) with custom output filters to list the IDs of the cloud subscriptions available in your Azure cloud account:

az account list
	--query '[*].id'

02 The command output should return the requested subscription identifiers (IDs):

[
	"abcdabcd-1234-abcd-1234-abcdabcdabcd",
	"abcd1234-abcd-1234-abcd-abcd1234abcd"
]

03 Run account set command (Windows/macOS/Linux) with the ID of the Azure cloud subscription that you want to examine as the identifier parameter to set the selected subscription to be the current active subscription (the command does not produce an output):

az account set
	--subscription abcdabcd-1234-abcd-1234-abcdabcdabcd

04 Run security pricing create command (Windows/macOS/Linux) to enable the Standard tier (i.e., Standard pricing plan) for the AI plan. This will enable Microsoft Defender for Cloud for your Azure AI Foundry resources:

az security pricing create
	--name AI
	--tier standard

05 The command output should return the configuration information available for modified pricing plan:

{
	"deprecated": null,
	"enablementTime": "2025-09-04T16:55:30.334574+00:00",
	"extensions": [
		{
			"additionalExtensionProperties": null,
			"isEnabled": "True",
			"name": "AIPromptEvidence",
			"operationStatus": null
		},
		{
			"additionalExtensionProperties": null,
			"isEnabled": "True",
			"name": "AIPromptSharingWithPurview",
			"operationStatus": null
		}
	],
	"freeTrialRemainingTime": "0:00:00",
	"id": "/subscriptions/abcdabcd-1234-abcd-1234-abcdabcdabcd/providers/Microsoft.Security/pricings/AI",
	"name": "AI",
	"pricingTier": "Standard",
	"replacedBy": null,
	"subPlan": null,
	"type": "Microsoft.Security/pricings"
}

06 Repeat steps no. 3 - 5 for each Azure subscription available in your Microsoft Azure cloud account.