Discover the importance of Annaizu Compliance Management in today's business landscape and how a Home Office compliance management platform can help your business streamline its compliance efforts, reduce risks, and stay ahead of regulations.
Every sponsor licence needs named individuals in specific roles — an Authorising Officer, a Key Contact, and at least one Level 1 User — and the Home Office holds the organisation accountable for keeping these roles filled by the right people, not just technically assigned.
The core roles
The Authorising Officer is the most senior person responsible for the licence. The Key Contact is the Home Office's main point of contact. Level 1 Users manage day-to-day Sponsor Management System actions, including assigning Certificates of Sponsorship; Level 2 Users typically have narrower permissions.
What Level 2 Users can and can't do
Level 2 access exists so day-to-day SMS work doesn't have to funnel through a single Level 1 User. A Level 2 User can typically handle routine tasks like updating sponsored workers' basic details, but the most consequential actions — assigning a Certificate of Sponsorship, reporting certain changes to sponsored workers' circumstances, and other duties that carry immigration consequences for the worker — generally require Level 1 access. Organisations sometimes assume that adding more Level 2 Users spreads the workload evenly; in practice it spreads only the lower-risk tasks, and the Level 1 layer still needs enough depth to cover Certificate of Sponsorship assignment and reporting without bottlenecking on one person.
Adding, removing, or changing a key person
Changing who holds these roles isn't a matter of updating an internal HR record and moving on. It's an action taken through SMS itself, and depending on the role being changed — particularly a new Authorising Officer — it can require supporting identity evidence and is subject to Home Office review before it takes effect. Organisations that treat a personnel change as purely internal sometimes discover, only when they need to act urgently, that the SMS record still shows the previous person and the update was never actually submitted or completed.
Suitability isn't automatic
Naming someone as Authorising Officer or Key Contact isn't just an administrative label — the Home Office can consider the suitability of the individual being put forward, including relevant unspent convictions, when a licence is granted or when personnel change. Sponsors should treat the choice of who holds these roles as a decision with immigration consequences, not simply whoever is most senior or most available at the time.
When the licence holder itself changes
Key personnel duties don't stop at individual role changes — they extend to changes in the organisation the licence is attached to. A merger, a TUPE transfer, a change of legal entity, or a group restructure can all mean the sponsor licence needs updating or, in some cases, reapplying for under the new entity, since a licence belongs to a specific legal person rather than to the brand or business operating under it. This is easy to miss in a restructure that's being run primarily as a corporate or HR exercise, where updating SMS records isn't naturally on the project plan. Level 1 Users and the Authorising Officer are usually the people best placed to flag this early, since they're the ones who can see the licence's actual scope and reporting obligations against what the restructure is proposing to change.
Why role turnover is a compliance risk
An ex-employee who still holds SMS access after leaving is a genuine finding at audit, not a technicality. Update roles the same week someone leaves, not at the next convenient review.
This is one of the most common findings in a Home Office compliance visit, because it's simple to check: an auditor can compare the current SMS user list against a current staff list or organisation chart in minutes. A mismatch — someone still listed who left months ago, or a role that's been vacant since a resignation with no replacement named — signals weak internal controls even when nothing else is wrong, and it's exactly the kind of gap that's easy to prevent with a standing offboarding checklist but hard to explain away once it's already been found.
Minimum staffing, not maximum caution
Relying on a single Level 1 User creates a single point of failure — if they're unavailable during a reporting deadline, the organisation still has to meet it. Most sponsors are better served by more than one authorised user.
Illness, parental leave, resignation without notice, or simply being on holiday when a reporting deadline lands are all ordinary events that shouldn't be able to derail a licence's compliance obligations. Building in redundancy — a second trained Level 1 User who actually knows how to use SMS, not just someone nominally listed — is a cheap safeguard against a much more expensive outcome: a missed reporting duty that becomes a compliance action against the licence. Pairing that redundancy with automated reminders for reporting deadlines removes the dependency on any one person remembering, rather than just having a backup who might also forget.
FAQ
Can the same person hold more than one of these roles?
Yes, in smaller organisations one person often holds multiple roles — but the Authorising Officer role can only be held by one person at a time.
Does changing personnel need to be reported to the Home Office?
Yes — key personnel changes are a reportable SMS action with their own timeline, not just an internal HR update.
Does a Level 1 User need to be a direct employee of the sponsor?
In most cases the key roles should be filled by people genuinely embedded in the organisation who can be held accountable for its compliance — using an external consultant or agency contact as the only named user, with no employee holding equivalent access, tends to raise questions at audit about who is actually in control of the licence day to day.
Related: SMS Login guide · Temporary Worker sponsor licence
GOV.UK references: Guidance for sponsors: apply for a licence
.svg)