Category: Board Structure and Roles

Delegation of Authority

Also known as: DoA, Delegated Authority, Delegation of Authorities Matrix, Authority Delegation

Simply put

Delegation of authority is the formal process by which a governing body, such as a board of directors, or senior management assigns specific decision-making powers to another person or position. It sets out who is permitted to take particular actions or decisions on behalf of the organization, and typically within what limits. The practice allows an organization to operate efficiently while keeping a clear record of who is accountable for which decisions.

Formal definition

Delegation of authority is a structured governance mechanism through which a board or senior management transfers defined decision-making powers to specified positions or persons, generally within stated scope, thresholds, and conditions. In many organizations it is documented in a formal delegation instrument or authority matrix, and, as a matter of good practice, authority is often delegated to a position title rather than to a named individual so that the delegation persists through personnel changes. Delegation typically transfers the authority to act but does not necessarily discharge the delegating body of its ultimate oversight or accountability, which depends on the governing framework, the entity type, and applicable jurisdictional and legal requirements. This entry is educational and not legal, audit, or compliance advice; the specific structure, limits, and legal effect of any delegation depend on the relevant governing documents, statutes, and the organization's own judgment.

Why it matters

A clear delegation of authority underpins both efficient operation and sound accountability. Without a documented framework setting out who may take which decisions, and within what limits, organizations risk decisions being made by individuals who lack the authority to make them, or important matters going unactioned because no one is clearly empowered to act. A well-constructed delegation instrument reduces this ambiguity by mapping decision rights to positions and thresholds, giving management the ability to act while preserving a traceable record of who is accountable for what.

Delegation is also central to the relationship between a board and management. A governing body cannot practically make every operational decision, so it delegates defined powers to management to run the organization day to day. Importantly, delegating the authority to act does not necessarily discharge the delegating body of its ultimate oversight or accountability. Whether, and to what extent, accountability is retained depends on the governing framework, the entity type, and applicable jurisdictional and legal requirements. Boards that treat delegation as a way to offload responsibility rather than to structure it may find that oversight expectations still rest with them.

Because the specific structure, limits, and legal effect of any delegation depend on the relevant governing documents, statutes, and the organization's own judgment, a delegation framework should be reviewed and maintained rather than set once and forgotten. Delegating authority to a position title rather than a named individual is one commonly cited good practice, since it allows the delegation to persist through personnel changes without requiring reissue each time a role holder changes.

Who it's relevant to

Boards of directors and their committees

The board typically sits at the top of an organization's delegation framework, defining which powers are reserved to it and which are delegated to management. Boards use delegation to enable day-to-day operation while retaining oversight, and should be alert that delegating the authority to act does not necessarily discharge their ultimate oversight or accountability, depending on the governing framework and applicable law.

General counsel and company secretaries

These roles are commonly responsible for drafting, maintaining, and interpreting the delegation instrument or authority matrix, and for advising on its legal effect. Because the structure and effect of a delegation depend on the relevant governing documents, statutes, and entity type, they often serve as custodians of the framework and its alignment with the organization's constitution and applicable requirements.

Senior management and delegated position holders

Executives and managers exercise delegated powers within the stated scope, thresholds, and conditions, and may in turn sub-delegate where permitted. Those holding delegated authority need clarity on the limits of their powers so that decisions are made by individuals genuinely empowered to make them, and so that actions taken on behalf of the organization are properly authorized.

Internal audit and assurance functions

Assurance providers use the delegation framework as a reference point to test whether decisions are being made within authorized limits and by the appropriate positions. A documented delegation matrix supports the traceability of accountability that assurance work depends on, though whether controls over delegation are designed and operating effectively is a matter for the specific review.

Compliance and finance teams

These functions frequently rely on delegation thresholds, such as spending or contracting limits, to structure approval workflows and controls. Clear, current delegations help ensure that approvals are obtained from positions with the requisite authority, though the appropriate limits and controls depend on the organization's own judgment and applicable requirements.

Inside DoA

Delegation Framework or Matrix

A structured document, often called a delegation of authority (DoA) matrix, that maps decision types and thresholds to the individuals or bodies empowered to approve them. It typically distinguishes authorities reserved to the board, those delegated to committees, and those delegated to management, and is usually calibrated by financial limits, risk levels, or transaction categories.

Reserved Matters

Decisions the board retains for itself and does not delegate, generally including strategy approval, major capital commitments, senior executive appointments, and other matters of fundamental significance. Identifying reserved matters is a core element that defines the boundary of what is delegated.

Authority Thresholds and Limits

Quantitative and qualitative parameters, such as monetary ceilings, contract durations, or risk categories, that determine the level at which an approval must be sought. Thresholds are the mechanism that operationalizes delegation in day-to-day activity.

Sub-delegation Provisions

Rules governing whether and how a delegated authority may be passed further down the organization, including any conditions, caps, or prohibitions. Clear sub-delegation terms help prevent authority from being exercised outside the intended chain of accountability.

Accountability and Oversight Linkage

Provisions clarifying that delegation transfers the authority to act but not the ultimate accountability of the delegating body. Under many governance frameworks, the board retains oversight responsibility for how delegated authority is exercised, and management remains accountable for operating within delegated limits.

Review and Revision Cadence

A defined process for periodically reviewing, updating, and re-approving the delegation arrangements to reflect organizational change, changes in risk profile, or changes in law and regulation applicable to the entity.

Common questions

Answers to the questions practitioners most commonly ask about DoA.

Does delegating authority also transfer the board's accountability for the delegated matter?

Generally, no. Delegation typically transfers the authority to act, not the ultimate accountability for oversight. In many jurisdictions and under most governance frameworks, the board retains responsibility for supervising delegated functions and cannot fully discharge its duties by delegation alone. The board is generally expected to set the boundaries of the delegation, monitor its exercise, and retain the ability to withdraw or amend it. The precise legal position depends on jurisdiction, entity type, and the specific duty in question, so this should be confirmed against applicable law and the entity's constitution.

Is a delegation of authority the same as an internal control?

Not exactly, though they are related. A delegation of authority is a governance instrument that allocates decision-making power and defines its limits; it is not itself an assurance activity. Approval thresholds within a delegation framework may function as preventive controls, but the delegation document sets authority rather than tests whether it operates effectively. Confirming that delegated authority is exercised within its limits is typically a matter of control operation and monitoring, which may involve management's first-line controls and, separately, assurance functions such as internal audit. Treating the two as interchangeable risks conflating governance design with control effectiveness.

How should a delegation of authority matrix be structured to remain clear and auditable?

A delegation of authority framework is commonly expressed as a matrix or schedule that maps categories of decisions to the level or role authorized to make them, together with monetary or non-monetary thresholds and any required approvals. Clarity generally improves when the matrix identifies who may act, within what limits, whether sub-delegation is permitted, and what matters are reserved to the board or a committee. Auditability is typically supported by version control, dated approvals, and a clear link to the underlying board resolution or policy. The appropriate structure depends on the entity's size, complexity, sector, and risk profile, and should reflect its own constitution and applicable requirements.

What matters are commonly reserved to the board rather than delegated to management?

Many governance codes and frameworks suggest that certain matters be reserved to the board because of their strategic significance or the accountability involved. These often include approving strategy and major transactions, significant capital expenditure above set thresholds, risk appetite, key policies, and senior appointments. The specific schedule of reserved matters is a matter for each board to determine in light of its constitution, sector, and applicable law or listing rules. This is a governance design decision rather than a fixed legal list, and entities vary considerably in what they reserve.

How often should a delegation of authority framework be reviewed?

There is generally no single mandated frequency; review cadence depends on the entity and its circumstances. Many organizations review delegations periodically, such as annually, and also on a triggered basis following events like a change in strategy, structure, leadership, risk profile, or applicable regulation. A review typically confirms that thresholds remain appropriate, that named roles are current, and that the framework aligns with the board's reserved matters. Whether and how often a review is required as a matter of law or listing rule varies by jurisdiction and should be checked against applicable requirements.

How can an organization monitor whether delegated authority is being exercised within its limits?

Monitoring typically operates across responsibilities rather than through a single mechanism. Management, as the first line, is generally responsible for building controls into approval workflows so that transactions require the correct authorization level. Second-line functions such as compliance may monitor adherence to the delegation policy, while internal audit, as an independent assurance function, may periodically test whether the controls operate effectively. Breaches or exceptions are commonly escalated and reported to the relevant committee or board. The appropriate design depends on the organization's structure, technology, and risk profile, and this description is educational rather than a prescription for any particular entity.

Common misconceptions

Delegating authority also delegates away the board's accountability.

Delegation generally transfers the power to make certain decisions, but the delegating body typically retains ultimate oversight accountability. Under many governance frameworks the board remains responsible for supervising how delegated authority is exercised, even though management performs the operational decision-making.

A delegation of authority matrix is a legal requirement that every organization must maintain in a prescribed form.

A formal DoA matrix is widely regarded as good governance practice rather than a universally mandated legal instrument. Specific requirements vary by jurisdiction, sector, and entity type; some legal or listing regimes expect certain reserved matters or internal control arrangements, but the format and content generally reflect the entity's own judgment.

Once authority is delegated, the recipient can freely sub-delegate it to others.

Sub-delegation is typically permitted only where the delegation framework expressly allows it and within any stated conditions or limits. Absent explicit provision, further delegation may fall outside the intended chain of authority and undermine accountability.

Best practices

Document reserved matters and delegated authorities in a single, board-approved delegation framework, clearly distinguishing what the board retains, what is delegated to committees, and what is delegated to management.

Calibrate authority thresholds to risk and materiality, not only monetary value, so that higher-risk or more sensitive decisions escalate to the appropriate level regardless of transaction size.

State sub-delegation rules explicitly, including whether it is permitted, any caps, and the conditions under which authority may be passed further down the organization.

Reinforce that delegation does not transfer oversight accountability, and align the framework with the board's ongoing supervisory role and management's accountability for operating within limits.

Establish a defined review cadence so the framework is periodically reassessed and re-approved to reflect organizational, risk, and applicable legal or regulatory changes.

Integrate the delegation framework with assurance and monitoring activities so that adherence to authority limits can be tested and exceptions reported to the appropriate oversight body.