Capabilities
Provisioning
AccessOwl creates user accounts with the specified roles/permissions during access requests.
Deprovisioning
AccessOwl deactivates users in Brex during access revocations.
Prerequisites
- User Management Admin access to your Brex account, so you can invite the integration account.
Setup
Add Brex in AccessOwl
Either add a new application or open Applications and click the +-symbol, then continue.
Invite the integration account as User Management Admin
AccessOwl shows you the integration account’s email address. In Brex:
- Go to Team > Invite your team.
- Under Add individuals manually, enter the integration account’s first name, last name, and email address.
- Select User Management Admin as the role.
- Click Send invite.
The integration account needs the User Management Admin role because it is the role designed to manage people and org structure in Brex. User Management Admins can invite and deactivate users, without having access to banking or billing information.
FAQ
The user was provisioned but I can't see them in Brex
The user was provisioned but I can't see them in Brex
When AccessOwl provisions a user, Brex sends them an invite email. The user only appears as active in your Brex Team list after they accept that invite and complete account activation. If a provisioning request shows as completed in AccessOwl but the user is not yet visible, they have not accepted the invite yet.
What is the difference between deactivating and deleting a user in Brex?
What is the difference between deactivating and deleting a user in Brex?
Brex does not permanently delete user accounts. Deactivating a user blocks spend on all of their active Brex cards and revokes their access to the Brex dashboard, but does not cancel their cards. A deactivated user can be reactivated later, which restores their dashboard access and card usage. AccessOwl uses deactivation during access revocations.

