DFSA

DFSA Authorised Individuals and Licensed Functions

2026-04-02 · 6 min read · By Aureus Worldwide

DFSA Authorised Individuals are the named people the Dubai Financial Services Authority (DFSA) approves to run the most important roles inside an Authorised Firm in the Dubai International Financial Centre (DIFC). Being licensed as a firm is only half the picture: the regulator also vets the individuals who will hold the key Licensed Functions, because sound governance depends on capable, accountable people. This guide explains what a DFSA Authorised Individual is, which Licensed Functions are mandatory, the residency and combination rules, and how the approval process works.

What is an Authorised Individual?

An Authorised Individual is a natural person the DFSA has approved to perform one or more Licensed Functions for a specific Authorised Firm. The approval attaches to the person and the role at that firm, it is not a portable qualification the individual carries around, and moving to another firm or taking on a new function requires a fresh approval.

The logic is straightforward: certain roles are so central to a firm running soundly and honestly that the regulator wants to satisfy itself, in advance, that the person filling each one is fit and proper. This mirrors the controlled-function approach used across the region and sits alongside the firm-level senior-management, systems and controls requirements, the individuals give the systems their teeth.

The mandatory Licensed Functions

Most Authorised Firms must appoint individuals to a core set of Licensed Functions. The precise combination depends on the firm's activities and prudential category, but the backbone is consistent:

Other Licensed Functions exist for particular structures, for example a Licensed Director or Licensed Partner where the firm is a company or partnership, a Senior Manager where responsibilities are delegated, and a Responsible Officer in some cases. A Representative Office appoints a Principal Representative instead of the full suite, reflecting its limited, marketing-only permission.

The SEO is the linchpin. This person carries overall responsibility for the firm's conduct, is expected to be genuinely in charge, and is the individual the DFSA holds accountable when things go wrong. The Finance Officer owns the numbers that feed capital monitoring and reporting; the Compliance Officer owns the relationship with the Rulebook; and the MLRO owns the firm's defences against financial crime, connecting to its wider AML and CTF obligations.

Residency and the substance requirement

The DFSA is not satisfied by names on an organisation chart, it wants substance. Key individuals are expected to be genuinely present and engaged, which is why the regulator looks for the Senior Executive Officer, Compliance Officer and MLRO to be resident in the UAE. A firm cannot run its regulated business from abroad through people who visit occasionally; the individuals responsible for running it, keeping it compliant and defending it against financial crime need to be here.

This substance expectation shapes hiring plans and cost. A firm applying for authorisation should identify and, where needed, relocate its key people early, because an application that cannot demonstrate a credible, resident management team will struggle. It also affects budgeting: capable, UAE-resident function holders are one of the real costs of being a regulated firm, alongside the fees and capital discussed in our guide to DFSA fees, supervision and ongoing obligations.

Combining and outsourcing functions

Smaller firms are not always expected to fill every role with a different person. Where the firm is lower-risk and there is no conflict of interest, the DFSA may allow one individual to hold several Licensed Functions, most commonly combining the Compliance Officer and MLRO roles, which sit naturally together. What the regulator will not accept is a combination that creates a conflict (for example, blurring the line between running the business and independently checking it) or one where a single person plainly cannot give each role proper attention.

Some firms also use outsourced compliance or MLRO support to supplement in-house capacity. Outsourcing can bring expertise a small firm could not otherwise afford, but it comes with a firm rule: responsibility never leaves the firm. The Authorised Individual and the firm remain accountable to the DFSA for the function, whoever performs the underlying work. Any outsourcing therefore has to be properly governed, documented and overseen, not treated as a way to make the obligation someone else's problem.

The fit-and-proper test for individuals

Every proposed Authorised Individual is assessed against the DFSA's fit-and-proper standard, which for a person turns on three pillars:

1. Integrity and honesty, the individual's character, disciplinary and regulatory history, and any findings that call their probity into question.
2. Competence and capability, the knowledge, skills and experience to perform the specific function, evidenced by track record and qualifications.
3. Financial soundness, the absence of financial difficulties, such as unmanaged insolvency, that could compromise the role.

For senior roles, particularly the SEO, the DFSA commonly interviews the individual and expects them to understand the business model, the rules that apply and their own responsibilities. Putting forward a candidate who cannot demonstrate genuine command of the role is one of the more avoidable ways an authorisation stalls.

Getting approved: the application

Applications for Authorised Individual status are submitted alongside the firm's own application for DFSA authorisation, because a firm cannot be licensed without the people to run it. In practice the process involves:

• Application forms for each individual and each function they will hold.
• Supporting evidence, detailed CVs, qualifications, references and disclosures of any regulatory or criminal history.
• Interviews for key roles, especially the SEO and often the Compliance Officer and MLRO.
• Assessment and grant, after which the individual may perform the function; the approval is specific to that person, that role and that firm.

Because these approvals sit on the critical path to launch, identifying credible candidates early and preparing their applications thoroughly is one of the highest-value things an applicant can do.

When an Authorised Individual leaves

Authorised Individual status is not permanent, and departures are a regulated event. When an individual ceases to hold a Licensed Function, through resignation, dismissal or a change of role, the firm must notify the DFSA promptly and ensure the function is not left vacant. A mandatory role such as SEO, Compliance Officer or MLRO cannot simply sit empty; the firm needs a succession plan so that cover is arranged and a replacement approved without a gap in accountability.

The DFSA can also withdraw an individual's status, and in serious cases take action against a person who has failed to meet their responsibilities. Keeping accurate records of who holds which function, and planning ahead for departures, keeps the firm on the right side of these duties and avoids the disruption of an unexpected vacancy in a mandatory role.

How Aureus Worldwide can help

Aureus Worldwide is a Dubai-based accounting, tax, CFO and compliance-advisory firm. We are not DFSA-authorised, and we cannot act as your approved Authorised Individuals, the SEO, Finance Officer, Compliance Officer and MLRO must be genuine, approved members of your firm. What we provide is practical support around those roles: outsourced CFO and accounting capability that helps your Finance Officer keep capital monitoring and reporting on track, and compliance officer support that supplements your in-house team, all coordinated with your DIFC and ADGM advisers and your appointed auditor. To strengthen the finance and compliance support behind your Licensed Functions, contact our team.

Talk to our chartered accountants →