Dex Admin
Administer the Dex platform itself from Dex Pro chat - users, roles, policies, apps, and org settings.
Dex Admin turns platform administration into a conversation. From Dex Pro, admins can manage users and access (assign Dex Pro seats, grant Dex Admin rights), edit policies and approval rules, enable or disable apps, manage builder items, review tasks, and change org settings - without opening the admin console. It also handles device-agent rollout: deploy the Windows and macOS device agents with guided enrollment-token setup. Every action runs on short-lived elevated tokens scoped per action, so nothing holds standing admin power. Built into Dex and enabled by default; admin-only and not available in Dex Go.
What Dex does with Dex Admin
Dex handles both admin workflows and employee self-service — all policy-guardrailed and audit-logged.
For admins (CoAdmin)
- Manage users and access - assign Dex Pro, grant or revoke Dex Admin rights
- Edit policies and approval requirements through chat
- Enable, disable, and configure apps without opening the admin console
- Manage builder items - skills, connections, and automations
- Deploy Windows and macOS device agents with guided enrollment-token setup
- Review platform tasks and change org settings
- Short-lived elevated tokens scoped per action - no standing admin power
Just ask Dex
Your team types a request in plain language. Dex investigates, plans, and executes — with the right guardrails.
Admin prompts
- >Give dana@acme.com access to Dex Pro
- >Require approval for all mailbox-permission changes
- >Disable the HubSpot app for now
- >Set up a device-agent enrollment token for the London office Macs
- >Who currently has Dex Admin rights?
Policy actions
Every action Dex can take on Dex Admin is declared, scoped, and guardrailed. Admins control which apply, who approves them, and whether they're limited to self-service.
| Action | What it does |
|---|---|
dex_admin_manage_access | Assign Dex Pro and grant or revoke Dex Admin rights |
dex_admin_edit_policies | Edit policies and approval requirements |
dex_admin_manage_apps | Enable, disable, and configure apps |
dex_admin_manage_builder | Manage builder items - skills, connections, automations |
dex_admin_deploy_device_agents | Deploy device agents with enrollment-token setup |
dex_admin_org_settings | Review tasks and change org settings |
How to configure Dex Admin
Onboarding takes minutes. Dex validates your credentials before saving them.
Setup steps
- 1Dex Admin is built into the platform and enabled by default - there is nothing external to connect.
- 2Only users with the Dex Admin role can invoke it, and it is available from Dex Pro only (not Dex Go).
- 3Each action mints a short-lived elevated token scoped to that action, and everything is logged in the activity trail.
- 4Configure which admin actions require approval from Policies, like any other app.
No extra credentials
This integration is covered by your Microsoft 365 tenant authorization to Dex. There are no per-app credentials to create or rotate.
Requirements
- •A Dex workspace (no external credentials - Dex Admin administers Dex itself)
- •The Dex Admin role on the requesting user
- •Available from Dex Pro only; hidden from Dex Go
Related integrations
RMM & EndpointWindows Device Agent
On-device diagnostics, PowerShell, and full remote-desktop control for Windows endpoints managed by Dex.
Learn more →
RMM & EndpointMac Device Agent
On-device diagnostics, scoped shell scripts, and APFS-aware disk forensics for macOS endpoints managed by Dex.
Learn more →
LicensingMicrosoft 365 Licenses
Assign, reclaim, and forecast Microsoft 365 licenses — no more digging through the admin center.
Learn more →
See Dex run Dex Admin
Book a 30-minute walkthrough with our team and see how autonomous IT works in your environment — or get started for free.