The world's first
autonomous IT engineer

What is Dex?

Dex is an autonomous AI IT engineer that lives in Microsoft Teams. Employees describe any IT issue or service request in plain language, and Dex instantly understands the request, investigates the root cause, and resolves it — all within minutes, before a ticket is ever opened.

How It Works

Dex follows a structured reasoning loop for every request. Here's what happens when an employee reaches out.

Capabilities

Dex handles a wide range of IT scenarios — from simple service requests to deep, multi-step troubleshooting.

Policy Engine

Dex is powerful — but every action it takes must be covered by an explicit policy. No policy means no action. This is how your organization stays in control.

employee → "Reset my password"
│
├─ ✓ Policy password_reset exists
├─ ✓ Constraint: self_only = true
├─ ✓ Approval: not required
└─ → Execute immediately

Anatomy of a policy

Every policy in Dex defines what can happen, who it applies to, and what guardrails are in place. Here's a real example:

Policy types

Security & Data Privacy

Dex is built for enterprise-grade security from the ground up.

Integrations

Dex connects to any SaaS product through its App Store. It ships with built-in integrations for the most common enterprise tools, and each app comes with its own connection configuration, skills, and policy templates.

Built-in apps

Microsoft Teams (User Channel)Slack (User Channel)Microsoft Entra IDOktaGoogle WorkspaceSharePointMicrosoft TeamsSlackExchange OnlineZoom WorkplaceAtlassian (Jira & Confluence)ServiceNowFreshdeskFreshserviceZendeskSysAidHaloPSAMicrosoft IntuneAction1LevelN-able N-sightAcronis Cyber ProtectSalesforceMicrosoft 365 LicensesWindows Device Agent

Explore all integrations →

Each app integration includes three components: a connection (API credentials and authentication setup), skills (the operations Dex can perform with that app), and policy templates (pre-configured rules discovered from your environment). When connecting a new app, Dex may ask for API keys or OAuth credentials, which are stored in an encrypted secure key store.

Device Agent

Dex includes a special Device Agent that runs directly on employees' Windows machines, enabling deep diagnostics and repair that go far beyond API-level management.

Onboarding

Setting up Dex is a guided, largely autonomous process. The onboarding wizard walks you through seven steps — and Dex's autonomous agents handle most of the heavy lifting.

How Discovery works

Each app in Dex has an autonomous discovery agent. When you connect an app, the discovery agent scans your environment and automatically generates the policies needed — for resources (e.g., each SharePoint site), actions (e.g., password reset), and services.

After discovery, you can review and customize every policy. You can give instructions to the discovery agent directly (e.g., “Add a policy for discount approval on Salesforce opportunities”) or edit policies manually through the UI. Each policy includes API templates that ensure the operation can only execute after the policy has been evaluated and, if required, approved.

Users & Policies

The Users & Policies screen is where you manage access, policies, and reference data. It has three tabs: Users & Roles, Policies, and Reference Data.

Users & Roles

Define who can access or manage your Dex environment by assigning roles to individual users or Entra ID groups.

You can assign roles to entire Entra ID groups (e.g., “All Employees” as Dex Users) or to individual users. Use the + Add User/Group button to add new entries. Each user or group can hold multiple roles simultaneously.

Approver Groups

Approver groups define who can approve policy-gated actions. Each group maps to an Entra ID security group and shows the number of members and how many policies route approvals to it.

Use + Create Group to add new approver groups. When a policy requires approval, Dex routes the request to the approver group specified in that policy.

Policies

The Policies tab lists every policy in your Dex environment. Policies are auto-generated during discovery and can be searched, filtered, toggled on/off, and edited.

Click any policy to open its full YAML-like definition in an editor. Each policy specifies the resource or action scope, constraints, access rules (auto-grant or require approval), the approver group, and eligibility criteria. Changes are saved immediately.

name: 'SharePoint: Communication site'
description: SharePoint site
resource:
  type: m365.sharepoint_site
  site_url: https://tenant.sharepoint.com
access_rules:
  default: require_approval
  approver_group: global_admins

Use Run Discovery to re-scan your connected apps and auto-generate new policies for any resources or actions that aren't covered yet.

Reference Data

Reference data provides organizational context that policies can use for scoping and eligibility. This tab has two sections:

App Store

The App Store is where you connect apps to expand what Dex can resolve autonomously. Each app is a self-contained integration with its own connection, skills, and tools.

Available apps

Dex ships with built-in apps for common enterprise tools. Each app card shows its name, status (Active or inactive), a description, and its components.

What's inside an app

Each connected app can include one or more of these components:

AI-assisted app setup

The App Store includes a built-in chatbot assistant that helps you configure new app connections. When you add a new app, the assistant walks you through the setup:

Activity Log

Track every task handled by Dex across your organization. The Activity Log records all actions from the Resolver agent, CoAdmin agent, and Onboarding agent in a single searchable view.

Task list

The main table shows every task with the following columns:

Use the search bar to filter by title, user name, or date. The filter icon lets you narrow by status, source, or category. Results are paginated and can be exported.

Task Overview

Click any task to open its full Task Overview panel. This panel has three tabs that give you complete visibility into what happened:

Understanding the Steps tab

The Steps tab provides full transparency into Dex's reasoning and execution. Each step is expandable and shows:

• The tool or API call that was executed (e.g., submit_approval_request, execute_salesforce_api_call)
• The full request payload including target ID, policy rule, approver group, and parameters
• The response including status, result data, notification counts, and next steps
• Duration of each step in seconds for performance visibility

CoAdmin for IT Admins

CoAdmin is Dex's direct admin interface — purpose-built for IT administrators who need to execute complex Microsoft 365 workflows. Investigate issues, run bulk operations, optimize licenses, and respond to security incidents, all through natural language.