Join, move, leave
Employee and freelancer onboarding, accounts, groups, role changes, permissions, and verified offboarding across your named systems.
Part-Time IT Administration
Part-Time IT Administration
REX5 provides part-time IT administration for small businesses with distributed employees and freelancers. REX5 handles onboarding, verified offboarding, SaaS access, and security, so you get professional IT administration without hiring a full-time IT employee.
One owner for the access workflow.
For small businesses with distributed employees and freelancers across several SaaS tools. You approve access decisions; REX5 carries them out and records the result.
Clean up and document
Initial system and account inventory, agreed cleanup, MFA and password-manager access, current procedures, and periodic security and access reviews.
Automate and check
Reusable role templates and supported integrations handle routine changes. Failed approvals or integrations go to a human for follow-up.
The tech stack REX5 manages.
User management for Google Workspace, Microsoft 365, and 1Password, plus access administration across your business’s tools.
- Productivity suites
Google Workspace
Microsoft 365
Google Workspace and Microsoft 365 user onboarding, offboarding, groups, and permissions.
- Communication
Google Meet
Slack
Microsoft Teams
Workspace membership, guest access, and communication permissions.
- Projects & knowledge
Jira
Confluence
Notion
Member access and permissions for projects, spaces, and documentation.
- Code collaboration
GitHub
GitLab
Organization membership, teams, and repository permissions.
- Password managers
Keeper
LastPass
1Password
NordPass
1Password user management and other password managers: invitations, vault access, and offboarding.
- Websites & commerce
WordPress
Shopify
Collaborator accounts and permissions for your websites and stores.
- AI tools
ChatGPT
Claude
Gemini
Team membership and roles in your shared AI workspaces.
- Cloud
AWS
Google Cloud
Azure
Identity, role, and permission administration in agreed cloud accounts.
- Hosting
Hostinger
SiteGround
Bluehost
Hosting account access and configuration of agreed monitoring checks.
- Domains & DNS
Cloudflare
GoDaddy
Administrative access and agreed DNS record changes.
REX5 confirms the platforms and scope with you before work starts. Software subscriptions are separate; SSO and automation depend on each platform and plan.
From scattered accounts to a repeatable routine.
- 01
Agree coverage
Name the systems, people, approval contact, service hours, and escalation path.
- 02
Inventory and clean up
Map accounts and owners. Resolve agreed access gaps and document the starting point.
- 03
Set up the workflow
Configure role templates, agreed SSO and MFA, approvals, and supported account integrations.
- 04
Operate and review
Capture each request once, apply approved changes, verify departures, and keep procedures current.
Supporting services. No separate REX5 fee.
REX5 Hub
An employee and admin dashboard for access requests, approvals, and onboarding and offboarding progress. Password-manager integrations are planned; customers keep their existing tools.
Explore REX5 Hub →REX5 SSO
The optional REX5-operated identity provider at sso.rex5.com is included for agreed integrations, subject to onboarding validation. You can keep your current provider. App capabilities and subscription plans determine where SSO works; you choose whether to upgrade.
MonitorSpider
Agreed checks and alert routing are included without a separate fee. MonitorSpider remains an independent platform. REX5 defines checks and response owners during onboarding; continuous monitoring does not mean 24/7 human response.
Explore MonitorSpider →SSO authenticates a person. The managed access workflow separately creates and removes accounts where provisioning is needed. REX5 validates customer isolation, application trust, sign-in, loss of access, and recovery before activating hosted SSO.
Scope and terms.
REX5 agrees a price with you for your team and coverage, with up to eight named systems. Initial inventory, agreed cleanup, and ongoing administration are part of the service. Software subscriptions are paid separately.
Six-month initial term, then monthly with 30 days’ notice. Coverage changes are agreed before additional work starts.
Security and scaling reviews are separately quoted projects.
Tell REX5 about your team →Coverage you can point to.
People and systems
A managed identity is a staff member or freelancer whose access REX5 administers. A named system is a specific agreed tenant or service, such as Google Workspace, Slack, GitHub, a password manager, or DNS. The agreement lists the systems and your approval contact. Standard DNS record changes are included when DNS is a named system.
Business-hours response
Human support operates during agreed business hours. Before you sign, the service agreement must specify working days, time zone, holiday coverage, acknowledgement targets for routine requests and urgent leavers, and the escalation contact and channel. These service hours and numeric targets are not yet published; obtain the written schedule before starting. Acknowledgement is not a guaranteed resolution time: approvals, application capabilities, and third-party availability can affect completion.
Scope changes, without surprise bills
Routine requests within coverage have no hidden time allowance or hourly charge. For exceptional request volume, a materially larger team, or unusually complex integration, REX5 confirms capacity and any scope amendment with you before extra work begins.
Separate work
Large migrations, custom application development, major infrastructure changes, and unusually complex integrations require a separate fixed quote. Formal audits, certifications, penetration testing, 24/7 incident response, hardware procurement, and general employee helpdesk are excluded unless separately agreed.
Questions before getting started.
Is there a setup fee?
No. Initial inventory, agreed access cleanup, and operating procedures are included.
What happens when the team adds another tool?
Routine access integration and documentation are included while you remain within the agreed eight-system band. A security or scaling review is a separate fixed-price choice.
Does SSO require app upgrades?
Some apps restrict SSO to certain plans. Your business chooses whether to upgrade and pays the subscription cost. SSO is optional for that app.
Is REX5 SSO required?
No. sso.rex5.com is an optional identity provider for managed customers, subject to integration validation. You can keep your existing identity provider.
Can the existing password manager stay?
Yes. Keep 1Password, LastPass, NordPass or your existing manager. REX5 administers agreed access; Hub automation depends on validated provider interfaces and your subscription plan.
What happens when the service ends?
You retain your domains, subscriptions, data, and primary administrative authority. REX5 hands over access records and procedures. Password-manager exports follow your provider’s capabilities. REX5 supplies existing documentation and access for handover; the incoming provider performs migration and new implementation. An export does not automatically migrate every item.
Does monitoring mean 24/7 response?
Checks and alerts run continuously. Human response follows the business hours and escalation path in your agreement. On-call coverage requires a separate arrangement.
Do you provide an employee IT helpdesk?
No. REX5 handles access requests and failures for agreed systems. Device issues, general application troubleshooting, and everyday employee IT support are outside this service.
Tell REX5 about your team.
Send your team size, primary tools, approximate joiner/leaver frequency, and main concern. REX5 will reply with scoping questions and a next step. A call is optional.
Tell REX5 about your team →You can also write to sebastian@rex5.com.