In my mind, it boils down to management.
Who needs to manage/view this information? Is it the same team that is tasked with monitoring IR? If, yes, probably want to enable it in the workspace for Sentinel (at resource group level). If no, you may want to install it in its own resource group.