Microsoft Teams
Manage Teams membership, route approvals to team owners, and send direct messages.
Dex connects to Microsoft Teams through Microsoft Graph plus the Bot Framework and lets admins and employees manage team membership and 1:1 messaging from natural language — with access requests automatically routed to the owners of each specific team rather than a single static IT group.
What Dex does with Microsoft Teams
Dex handles both admin workflows and employee self-service — all policy-guardrailed and audit-logged.
For admins (CoAdmin)
- Discover every Team in the tenant (groups with the Team resource provisioning option)
- Route access requests to the owners of each specific team (group_owners approver pattern)
- Add and remove members from teams, with approval from team owners
- Fall back to a global_admins approver when a team has no owner set
- Send direct 1:1 Teams messages to users resolved by email or UPN (useful for notifications, onboarding, approval nudges)
- Receive incoming Teams bot messages and route them to Dex for conversational IT support
- Audit every membership change and message send through Dex activity logs
For employees (self-service)
- Request to join a specific Team (routed to that team's owners, not generic IT)
- Chat with Dex directly in Teams for password resets, group access, and other self-service actions
- Receive Dex notifications, approval requests, and ticket updates as Teams direct messages
- Show me every Team I'm a member of
Just ask Dex
Your team types a request in plain language. Dex investigates, plans, and executes — with the right guardrails.
Admin prompts
- >Add noa@acme.com to the "Product Launch" team
- >Send a Teams message to every new hire from this week welcoming them and linking to the onboarding checklist
- >List every Team where I'm an owner and show member count for each
- >Remove contractor@agency.com from all Teams when her engagement ends on April 30
- >Which team owners will get the approval request if someone asks to join "Finance Leadership"?
Employee prompts
- >Add me to the "Frontend Guild" team
- >Message Sarah on Teams that her laptop ticket is resolved
- >Show me the Teams I'm a member of and which ones I own
- >Request to join the "Eng All-Hands" team
Policy actions
Every action Dex can take on Microsoft Teams is declared, scoped, and guardrailed. Admins control which apply, who approves them, and whether they're limited to self-service.
| Action | What it does |
|---|---|
grant_access | Add a user to a Team (routed to that team's owners for approval) |
revoke_access | Remove a user from a Team |
send_direct_message | Send a 1:1 Teams direct message to a user by email/UPN |
list_memberships | List a user's Team memberships |
How to configure Microsoft Teams
Onboarding takes minutes. Dex validates your credentials before saving them.
Setup steps
- 1Complete the Dex Microsoft 365 integration if you haven't — Teams membership operations use the tenant-wide Graph consent.
- 2For Teams bot messaging (1:1 DMs from Dex), register the Dex bot in the Azure portal under Bot Services and install it in your tenant's Teams app catalog.
- 3Grant admin consent for the bot's Graph application permissions: User.Read.All (resolve recipients) and ChannelMessage.Send / Chat.Create (1:1 chats).
- 4In Dex, enable the Teams integration — it reuses the M365 Graph connection for membership, plus the Bot Framework credentials for DMs if messaging is enabled.
- 5Run Teams discovery — Dex enumerates all teams via /groups?$filter=resourceProvisioningOptions eq 'Team', fetches owners per team, and generates per-team policy targets with group_owners approvers.
- 6Test a 1:1 DM from Dex to yourself to confirm the bot is installed and the Bot Framework credentials work.
No extra credentials
This integration is covered by your Microsoft 365 tenant authorization to Dex. There are no per-app credentials to create or rotate.
Requirements
- •Microsoft 365 tenant with Teams licenses (any Business or Enterprise plan including Teams)
- •Global Administrator needed to grant admin consent for Graph and to install the Dex bot in Teams
- •Graph credentials are inherited from the Dex Microsoft 365 connection — no app-specific setup for membership operations
- •1:1 DM sending requires a separate Bot Framework app registration (appId + secret) and installation of the Dex app in Teams
- •Teams access approvals use the group_owners pattern — teams without owners fall back to global_admins
Related integrations
Directory & IdentityMicrosoft Entra ID
Manage Entra ID users, groups, licenses, and sign-in risk through Microsoft Graph.
Learn more →
Directory & IdentitySharePoint
Grant, audit, and query SharePoint sites and lists through Microsoft Graph.
Learn more →
CollaborationSlack
Run Slack admin operations and drive end-user conversations with Dex — all from one app.
Learn more →
See Dex run Microsoft Teams
Book a 30-minute walkthrough with our team and see how autonomous IT works in your environment — or get started for free.