cannot find the option in the GUI.
but is the AP SSH-CLI an acceptable alternative?:
When a Mobility Express capable AP, joins the Mobility Express controller, the controller sends a payload to enable SSH on the AP. The SSH state on the AP is persistent, unless it is updated from the controller.