Defender for Linux policies not assigned

Hi we started onboarding of some Ubuntu 22.04 Clients to Intune and we assigned a Defender policy for Linux to the Devices. We installed Defender manually so this is shown in security.microsoft.com but the Defender policy is not applied so that for example real-time protection is still off. We tried User Assignment and sync via Intune Portal App and we tried to create a Device Group and assign the policy to this group. Nothing seems to work. Is there something i missed, are both assignment groups (Device or User) allowed ?  How do we get this working ?