The Authorising Officer Role: Responsibilities Every HR Team Must Know

Key Takeaways

• The Authorising Officer (AO) is the most senior person in your organisation responsible for recruiting sponsored workers and for making sure you meet all your sponsor duties. You can only have one AO at any time.
• The AO must be a paid member of staff or an office holder within your organisation. You cannot appoint a representative or someone from another organisation, the only exception being an insolvency professional where the company goes into administration.
• You must have an eligible AO in place throughout the life of the licence. The Home Office states it will normally revoke your licence if you do not have a suitable and eligible AO, or if you fail to tell it about a change of AO.
• The AO does not get automatic access to the Sponsor Management System. If they need access, they must also be appointed as a Level 1 or Level 2 user.
• The AO decides who has SMS access and at what level, and is responsible for the actions of every SMS user. The guidance recommends the AO checks the certificates of sponsorship assigned at least once a month.
• Suitability is tested. Unspent convictions for listed offences, relevant civil penalties, and being legally prohibited from acting as a company director will lead to refusal or revocation, and recent history as key personnel at a refused or revoked sponsor also counts against you.
• Since the March 2026 guidance update, the AO is expected to demonstrate they have read and understood the sponsor guidance and cascaded that understanding to relevant staff. A nominal, uninvolved AO is now a compliance risk in itself.
• The AO role needs a system behind it. WPC HR's compliance software gives your AO a live oversight dashboard covering CoS activity, reporting deadlines and worker files, and our Sponsor Licence Compliance Audit tests whether that oversight would satisfy a Home Office officer.

Introduction

Of all the roles attached to a sponsor licence, the Authorising Officer is the one most often filled in by default. A name goes on the application form, usually a director or the head of HR, and then very little changes. The work happens elsewhere, in the SMS and in the HR files, and the AO hears about immigration only when something goes wrong.

That is a genuinely risky arrangement, because the Home Office does not treat the AO as a formality. The guidance makes the AO responsible for the activities of every SMS user, expects them to be the most senior person accountable for sponsor duties, and states that the Home Office will normally revoke a licence where there is no suitable and eligible AO in place or where a change of AO has not been reported. In other words, a role many organisations treat as a signature is one of the few things that can cost you the licence on its own.

This guide sets out what the AO role actually involves: who can hold it, the suitability tests they must pass, what they are accountable for day to day, how the role interacts with the SMS and the other key personnel, what happens when an AO leaves, and how HR teams can support an AO so the accountability is real rather than nominal. For further background, see our group's guide to the Authorising Officer role in sponsor licence compliance.

Who the Authorising Officer Is

The Authorising Officer is one of four key personnel roles attached to a sponsor licence, alongside the Key Contact, Level 1 users and Level 2 users. GOV.UK describes the AO succinctly as a senior and competent person responsible for the actions of staff and representatives who use the SMS. You can read the summary of the sponsorship management roles on GOV.UK.

The detailed requirements sit in section L4 of Part 1 of the sponsor guidance. It requires the AO to be the most senior person in your organisation responsible for the recruitment of all sponsored workers and for ensuring you meet all of your sponsor duties. Where you do not recruit the workers you sponsor, the role must be filled by the most senior person responsible for your activity as a licensed sponsor. You must nominate an eligible AO when you apply, and if you do not, the application will be refused.

Only one person can hold the role at any one time. Where more than one person could plausibly fill it, you choose, but you carry the consequences of that choice: the guidance states that you are responsible for the actions of your Authorising Officer, so you should be confident they fully understand the importance of the role.

Who Can and Cannot Be Your AO

The eligibility rules are narrower than for other key personnel, and this is where organisations most often go wrong by appointing someone external or too junior.

It is worth being clear about a common misunderstanding. Level 1 and Level 2 users can, in defined circumstances, come from outside your organisation, for example where you outsource part of your HR function or use an adviser. The AO cannot. That accountability must sit inside the business.

The Suitability Tests

The Home Office assesses everyone involved in your sponsorship, and the AO is central to that assessment. The guidance distinguishes between grounds that will lead to refusal or revocation and those that will normally do so.

Your application will be refused, or your licence revoked, where a relevant person has an unspent conviction for an offence listed in Annex L4 of the guidance, has been issued with a relevant civil penalty, or is legally prohibited from being a company director for any reason including bankruptcy, unless a court has given permission that would cover acting as key personnel.

Beyond that, GOV.UK sets out further circumstances that may prevent you obtaining a licence, including where someone involved in sponsorship:

• has been fined by UKVI in the past 12 months, or has been reported to UKVI.
• has broken the law, or has failed to pay VAT or other excise duty.
• was key personnel at a sponsor whose licence was refused in the last 6 months.
• was key personnel at a sponsor whose licence was revoked in the last 12 months, or in the last 24 months where they have been key personnel for more than one revoked licence.
• is subject to a bankruptcy restriction order or undertaking, or a debt relief restriction order or undertaking, or has a history of non-compliance with sponsor requirements.

The practical point for HR is that this needs checking before the appointment, not after. Ask the proposed AO directly about unspent convictions, director disqualification, bankruptcy restrictions and any previous involvement with a sponsor licence that was refused or revoked. Discovering a problem at the application stage costs you a fee and a delay. Discovering it during a compliance visit puts an existing licence at risk.

What the Authorising Officer Is Actually Responsible For

The AO's accountability is broad, and it is worth separating what they must decide from what they must oversee.

Deciding who can use the SMS

The AO is responsible for deciding how many of your staff need SMS access and what level of permission each should have. That makes access control an AO decision, not an IT or administrative one, and it is a decision that should be revisited whenever someone joins, changes role or leaves.

Being accountable for every SMS user's actions

The guidance is unambiguous: the AO is responsible for the activities of all SMS users and must comply with the requirements for using the system, and if they fail to do so the Home Office will take action against the sponsor. A mistake made by a Level 2 user assigning a certificate is, in accountability terms, the AO's problem.

Actively checking that activity

Because of that accountability, the guidance says you must have a system in place to check SMS user activities, and it goes further with a specific recommendation: that the Authorising Officer checks the certificates of sponsorship assigned to workers at least once a month. This is one of the most concrete, testable expectations in the whole role, and it is the one most often ignored. A monthly CoS review, documented, is straightforward to implement and demonstrates precisely the oversight the Home Office is looking for.

Ensuring the organisation meets its sponsor duties

Sitting above all of this is the overarching duty: the AO is the person responsible for ensuring the organisation meets all of its sponsor duties, covering reporting through the SMS, record-keeping under Appendix D, monitoring immigration status and attendance, and compliance with wider UK law. They do not have to perform every task, but they are answerable for whether it is done.

Understanding the guidance, and cascading it

Following the March 2026 sponsor guidance update, expectations on the AO tightened further, with an explicit emphasis on the AO being able to demonstrate they have read and understood the guidance and have passed that understanding on to relevant staff. An AO who cannot explain the basic duties during a compliance visit is now a finding in itself, not merely an awkward moment.

The AO and the SMS: A Common Trap

One detail catches out a surprising number of sponsors. The Authorising Officer does not have automatic access to the Sponsor Management System. Only Level 1 and Level 2 users can log in. If your AO needs to see the system, they must also be appointed as a Level 1 user (either on the licence application or afterwards) or as a Level 2 user once the licence is granted.

This creates an obvious tension. The AO is accountable for everything that happens in the SMS but, unless separately appointed, cannot see it. Organisations resolve this in one of two ways: either the AO is also set up as a Level 1 user so they can review activity directly, or a reporting routine is built so that a Level 1 user provides the AO with a regular, documented summary of certificates assigned, reports made and users added or removed. Either approach works. Having neither is how AO oversight quietly becomes fictional.

How the AO Fits With the Other Key Personnel

One person can hold more than one role provided they meet the requirements for each, which is common in smaller organisations. Where that happens, the risk is concentration: if a single individual is AO, Key Contact and sole Level 1 user, their departure or absence can leave the licence effectively unmanned. That leads directly to the next point.

When the AO Leaves: The Highest-Risk Moment

The guidance requires an eligible Authorising Officer in place throughout the life of the licence, and states that the Home Office will normally revoke the licence where it finds either that you do not have a suitable and eligible AO in place, or that you failed to tell it about a change of Authorising Officer. Those are two separate failures, and the second is purely administrative, which makes it all the more avoidable.

Resignations, retirements, restructures, long-term sickness and parental leave all put the role at risk, and they rarely arrive with immigration in mind. The change must be reported through the SMS within 20 working days, and note the distinction between replacing an AO, where a different person takes over, and amending the details of the existing AO. Replacing the AO is done by a Level 1 user and also requires a submission sheet to be emailed to UKVI, signed by the new Authorising Officer.

The mitigations are simple and worth putting in place now:

1. Identify a deputy in advance. Know who would step into the AO role tomorrow, and check they would meet the eligibility and suitability requirements.
2. Add the licence to your leaver process. Any exit for a director or senior manager should trigger a check of whether they hold a key personnel role.
3. Avoid single points of failure. Keep more than one trained Level 1 user so the licence is never dependent on one person's availability.
4. Handle long absences deliberately. Extended leave is not the same as leaving, but if the AO cannot genuinely discharge the role, address it rather than letting the position drift.
5. Report promptly and keep the evidence. Make the SMS report within the deadline and retain confirmation, so you can show the change was notified.

Making the Role Real: Practical Support From HR

Most AOs are senior people with a demanding day job and no immigration background. Making their accountability genuine is largely an HR design problem, and a few habits do most of the work.

• A documented monthly CoS review. Put the guidance's recommendation into practice with a short, recorded monthly check of certificates assigned, who assigned them, and whether the details match the role and salary.
• A standing compliance report. Give the AO a regular summary of reportable events made and outstanding, visa expiries approaching, right to work checks completed and any gaps identified.
• A user access review. Have the AO formally confirm, on a set cycle, who holds SMS access and at what level, and remove anyone who has left or changed role.
• An induction and refresher for the AO. Make sure they have actually read the sponsor guidance relevant to your routes, and record that they have, along with any updates cascaded to staff.
• A briefing before any compliance visit risk. The AO should be able to explain your processes in their own words, not just point at a system.
• An escalation route. Make clear how and when issues reach the AO, so problems surface early rather than at an audit.

Common AO Mistakes

How Can WPC HR Help?

An Authorising Officer can only be accountable for what they can actually see. WPC HR's HR compliance software is built to give the AO exactly that: a live compliance dashboard covering every sponsored worker, alerts for visa expiries and reporting deadlines, a record of right to work and share code checks, and a clear view of certificate activity so a monthly CoS review takes minutes rather than being quietly skipped. Because the evidence of that oversight is captured automatically, you can show a compliance officer that the AO's accountability is real rather than nominal. If you would like an expert view on whether your key personnel arrangements and oversight would withstand scrutiny, our Sponsor Licence Compliance Audit reviews your whole sponsored workforce and your governance, and gives you a prioritised plan to close any gaps.

📞 Call us: 020 8087 2343
📅 Book a free compliance audit: wpchr.co.uk/sponsor-licence-compliance-audit
🔗 See the platform: wpchr.co.uk/hr-compliance-software-features

Conclusion

The Authorising Officer is not an administrative detail on a form. It is the point at which responsibility for your entire sponsorship operation is concentrated in one named, senior individual, and the Home Office has built real consequences around it. Have the wrong person, or no person, or fail to report a change, and you are in territory where the guidance says a licence will normally be revoked, regardless of how well the rest of your compliance is running.

The fix is not complicated. Appoint someone genuinely senior and internal, check their suitability before they are nominated, give them either SMS visibility or a reliable reporting line, put the recommended monthly certificate review into the calendar, keep evidence that they understand the guidance, and plan for the day they move on. Do that and the AO becomes what it is meant to be, a real line of accountability that makes the whole licence safer. Where you want the systems and the assurance to make that oversight effortless, WPC HR can help you put it in place.

Glossary