| Workflow ID | AW-05 |
| Pack owner | IoL Administrative Affairs (decision of 2 September 2026; see Architecture/04_Ownership_Model.md) |
| Family | H — Governance and documented information |
| Ownership | Slice of the Dubai Health Delegation of Authority (DOA) framework. The DOA Manual sets the institutional levels (Level 2 CEO, Level 3, Level 4 and the Board) and the authority delegated to the Dean of IoL; IoL owns the departmental register that sub-delegates that authority to the HAO and the SDO Head of Finance, the acting arrangements, the routing configuration it controls and the annual attestation. Confirmed by the IOL-OPS pack (SDO, 17 September 2026), which cites the DOA Manual chapter for every transaction type |
| Governing policy | Dubai Health Delegation of Authority Manual (Section A Responsibility of Approvers; Chapter 2 Procurement; Chapter 3 Payment Processing; Chapter 4 CAPEX; Chapter 5 OPEX; Chapter 6 Personnel; Chapter 8.1 Disposal of Assets; Chapter 9 Educational Events, Prices for Short Courses, Visiting Professors or Experts; Chapter 10.4 Budget); University financial regulations; ISO 9001:2015 clause 5.3; ISO 21001:2018 clause 5.3 |
| Interfaces | AW-10 purchasing; AW-11 payments and claims; AW-23 contracts; AW-07 staff lifecycle; AW-02 virement; AW-01 committee authority; AW-22 external communications; AW-18 learner-facing decisions; AW-15 system routing; AW-24 breaches |
| OBEF touchpoint | None |
| Process owner | Head of Administration and Operations (HAO); custodian: Administration Affairs (SDO) |
| Version | 0.2 draft |
| Effective | |
| Next review |
1. Purpose and scope
Purpose. To ensure that every approval given in IoL's name is given by someone who holds the authority to give it, at the value and for the category concerned, that no one approves their own transaction, that authority does not lapse when a post-holder is absent, and that the approval routing built into University's systems matches the written register rather than the other way round. An approval outside delegation is not an approval, however senior the person who gave it.
Scope statement. This procedure manages the IoL delegations register from the receipt of University's delegation to the head of IoL, through sub-delegation, acting arrangements and system configuration, to the annual attestation that the register and the systems agree.
Applies to. Approvals for purchasing, payments and claims, contracts and MoUs, staff appointments and changes, leave, external communications, and learner-facing decisions where IoL holds delegated authority (fee waivers, holds, adjustments, letters). Committee authority stated in terms of reference under AW-01 is cross-referenced here.
Does not apply to. The institutional matrix itself; academic decisions vested in academic bodies by University's academic regulations (WF-01, WF-09, WF-10, WF-11); authority University has not delegated to IoL, which is routed to University and never assumed.
2. Trigger, boundary and interfaces
| Trigger | University issues or changes the delegation to the head of IoL; a post-holder changes; an absence longer than the acting threshold; a new approval type or system; the annual attestation date |
| Endpoint | Register current and attested; system routing reconciled to the register; every approval in the year traceable to a valid delegation |
| Upstream | University delegation framework; AW-07 (post-holder changes and leave); AW-01 (committee authority) |
| Downstream | AW-10, AW-11, AW-23, AW-02, AW-07, AW-22, AW-18 apply the register at every approval step; AW-15 configures routing; AW-24 receives breaches |
| Handoff to the academic pack | None. Where an academic workflow contains an administrative approval (a WF-24 agreement signature, a WF-21 fee decision), it cites this register for the authority. |
3. Roles and accountability
Process owner. Head of Administration and Operations (HAO), with authority to suspend any system routing that does not match the register. Administration Affairs (SDO) maintains the register.
| Step | Dean, IoL | HAO (process owner) | Delegate | Line manager | HQ Finance or HQ HR | AW-15 system administrator |
|---|---|---|---|---|---|---|
| Receive and interpret University delegation | A/R | R | I | I | C | I |
| Approve a sub-delegation | A/R | R | C | C | I | I |
| Maintain the register | I | A/R | I | I | I | I |
| Approve an acting arrangement | A | R | C | R | I | I |
| Configure system routing | I | A | I | I | C | R |
| Reconcile routing to register | C | A/R | I | I | I | R |
| Annual attestation | A | R | R | I | I | I |
| Report a breach | I | A/R | I | I | I | I |
[CONTROL] Segregation. The person who maintains the register does not hold a delegation above the lowest band in it, or where unavoidable the Dean, IoL, approves every change to that person's own entry. The system administrator configures routing but holds no approval authority. A delegate never approves a transaction they requested, benefit from, or are the subject of.
4. Procedure
Receive the institutional delegation. The Dean, IoL, obtains the current University delegation to the head of IoL in writing and the process owner files it as an external document of origin under AW-03. [CONTROL] IoL sub-delegates only what University has delegated; the register cites the institutional clause for every entry.
Build the register. For each approval category the register states the role (not the person) holding authority, the value band, the conditions, whether sub-delegation is permitted, and the system in which the approval is given. IoL operates three internal tiers below the DOA levels. The three values are the single most important gap in the pack: every merged procedure cites them and none states them
[HAO to state: the internal limit for tier 1, the HAO limit for tier 2, and the Dean's authority under the DOA Manual for tier 3].Tier Approver Up to Notes 1 SDO Head of Finance The internal limit set by the HAO [HAO to state]Budget confirmed by SDO before approval 2 Head of Administration and Operations (HAO) The HAO limit [HAO to state]3 Dean, IoL The Dean's authority under the DOA Manual [HAO to state]The Dean's own transactions go to the Dean's superior [to name]Above 3 Dubai Health HQ Level 3, Level 2 (CEO) or Board as the DOA Manual assigns Submitted through HQ by the HAO or the Dean Categories, with the DOA Manual chapter the OPS pack cites and the tier or level that applies:
Category Chapter Tier or level Conditions Purchase requests (AW-10) 2, 4, 5 Tiers 1 to 3 by value; above the Dean, Level 3 through HQ Direct purchase justification and variations (30% cap under Law No. 12 of 2020) approved by HAO or Dean Honoraria, speaker fees and claims (AW-11) 3, 9 Tiers 1 to 3 by value; visiting professors or experts Level 2 (CEO) before engagement Beneficiary rule: nobody endorses or approves their own claim; a Chair's claim goes to HAO or Dean, the HAO's to the Dean, the Dean's to the Dean's superior
| Business travel (AW-11) | 3 | Dean decides every IoL travel request; HAO authorises processing | Business class limited to Directors and above, People of Determination, or HQ HR exception | | Budget proposal, reallocation and unbudgeted spend (AW-02) | 10.4, Section A | Proposal HAO and Dean; sub-account reallocation HAO; unbudgeted spend HAO or Dean plus written agreement of the CFO and the functional executive | No transfer between the University and DAHC budget entities | | Staffing priorities and starting salary (AW-07) | 6 | Priorities: Dean after Operational Committee review; allocation: HQ HR and HQ Finance; starting salary to grade midpoint HAO or Dean, above it Level 3 with the COO | No recruitment before HQ approval | | Asset transfer, retirement and disposal (AW-13) | 4, 8.1 | HAO or Dean; disposal Level 2 through HQ Asset Management | Condemnation letter for biomedical assets | | Consumables replenishment and disposal (AW-13) | 5 | Tier 1 within the internal limit, otherwise HAO or Dean; disposal HAO | Through the HQ Inventory Management system | | Contracts, MoUs and agreements (AW-23) | 2 | HAO or Dean after HQ Contracting and Procurement review and HQ Legal clearance; beyond the Dean, Level 3; revenue contracts countersigned at Level 3 | Total value decides the level; revenue is not offset against cost; no auto-renewal beyond one term | | Workplace services and civil works (AW-14, AW-15) | 4, 5, 9 | Cost: tiers 1 to 3; civil works: HAO or Dean then the Space Committee (inside University premises) or the Capital Committee (outside) | Standard services on the Annex A list need no endorsement | | Learning activities (AW-21) | 9, 2, 3, 5 | Resources: Operational Committee; content: CE Committee; final approval of an educational event: HAO or Dean under Level 4 | No commitment before final approval | | External prices and cost attribution (AW-12) | 2, 9 | Short-course prices Level 2 (CEO) after HAO or Dean endorsement; change of events fee structure VP or Level 3; attribution memo HAO or Dean | Full-cost pricing; no price quoted before approval | | External communications (AW-22) | | Communications lead for routine; Dean for positions and media | University communications above | | Learner-facing decisions (AW-18, AW-19) | | Learner services lead within policy; programme lead; Dean | University registrar or committee above |
Approve sub-delegations. Each sub-delegation is approved in writing by the Dean, IoL, names the role, the limit and any conditions, and is entered in the register with the date. A delegate may not sub-delegate further unless the register expressly permits it. [CONTROL] No sub-delegation exceeds the authority of the person granting it.
Confirm delegates on appointment. When a post-holder changes (AW-07), the process owner issues the new incumbent a statement of the authority attached to the role and obtains a signed acknowledgement before any approval is given. The outgoing incumbent's routing is removed the same day.
Arrange acting authority. For a planned absence longer than ______ working days
[IoL to confirm]the post-holder's line manager nominates an acting delegate at the same or higher grade; the Dean, IoL, approves; the arrangement has a start and end date and is entered in the register and the system. For unplanned absence the line manager assumes the authority until an acting delegate is approved. [CONTROL] Acting authority is never assumed by the absentee's subordinate without written approval, and it expires on the stated date.Apply the register at every approval. Each interfacing procedure checks that the approver holds the category and band before treating the approval as valid. [CONTROL] Self-approval is prohibited: a requester, claimant, contracting party or subject of a decision never approves it, and the next level up approves instead. [CONTROL] Splitting a transaction, invoice, contract or claim to bring parts under a threshold is a breach; related items within a quarter are assessed together at their combined value and reported to AW-24 where splitting is found.
Configure system routing. The process owner specifies routing rules for the procurement, finance, HR and learner-records systems
[IoL to confirm systems]from the register, and the AW-15 system administrator or University system owner implements them. Where a system cannot enforce a band, the manual check in step 6 is documented as the compensating control. [CONTROL] No routing change is made without a register change approved first.Reconcile routing to the register. Quarterly, the process owner obtains the routing configuration from each system and reconciles it to the register. Differences are corrected within the service standard and any approval given under an incorrect routing is reviewed and ratified or reversed.
Attest annually. Each delegate confirms in writing that they hold the authority shown, have not approved outside it, have not self-approved and are not aware of splitting. The Dean, IoL, attests the whole register to University where University requires it
[IoL to confirm]. [CONTROL] The attestation is evidenced by a sample of approvals from each system tested against the register by AW-24.Report and treat breaches. Any approval found outside delegation, any self-approval and any splitting is logged, the transaction is referred to the Dean, IoL, for ratification or reversal, and a non-conformity is raised through AW-24. Repeated breach by the same delegate leads to withdrawal of the delegation.
Exception routes. Emergency approval where no delegate is available: the Dean, IoL, or the acting head approves and the process owner records the emergency and the reason. Where University changes the institutional matrix mid-year, the register is updated within 10 working days and routing within a further 10; approvals in the interval are given at the lower of the old and new limits.
5. Service standards
| Service | Standard |
|---|---|
| Register updated after an University change | 10 working days |
| Sub-delegation approved and registered | 5 working days |
| New incumbent's authority statement issued | Before first approval, within 5 working days of start |
| Departing incumbent's routing removed | Same day |
| Acting arrangement registered | Before the absence begins, or within 1 working day for unplanned absence |
| Routing reconciliation | Quarterly, within 15 working days of quarter-end |
| Routing discrepancy corrected | 5 working days |
| Annual attestation complete | By ______ each year [IoL to confirm] |
6. Records, retention and controls
| Record | System | Retention | Owner |
|---|---|---|---|
| Institutional delegation to IoL | Controlled repository, external documents of origin (AW-03) | Permanent | Dean, IoL |
| Delegations register with change history | Controlled register (AW-03) | Permanent | Process owner |
| Sub-delegation approvals and acknowledgements | Repository | Life of delegation plus 7 years
[IoL to confirm against University schedule] |
Process owner |
| Acting arrangements | Repository and system | 7 years | Process owner |
| Routing specifications and reconciliations | Repository | 7 years | Process owner |
| Annual attestations | Repository | 7 years | Dean, IoL |
| Breach log | Repository, linked to AW-24 CAPA register | 7 years | Process owner |
Key controls. (1) Every entry in the register cites the University authority it derives from. (2) No sub-delegation exceeds the grantor's authority. (3) No self-approval. (4) No splitting; related items are assessed at combined value. (5) Acting authority is written, dated and expiring. (6) System routing matches the register, reconciled quarterly. (7) Departing incumbents lose routing the same day. (8) Annual attestation with sample testing by AW-24.
OBEF touchpoint. None.
7. Performance measures
| Dimension | Measure | Target | Frequency |
|---|---|---|---|
| Timeliness | Register updated within 10 working days of a DOA Manual change | 100% | Per change |
| Timeliness | Departing incumbents' routing removed same day | 100% | Monthly |
| Compliance | Approvals in the AW-24 sample within delegation | 100% | Quarterly |
| Compliance | Self-approvals, beneficiary-rule breaches and splitting found | 0 | Quarterly |
| Accuracy | Routing discrepancies at quarterly reconciliation | 0, with trend reported | Quarterly |
| Compliance | Delegates completing annual attestation | 100% | Annual |
| Experience | Approvers reporting they know their limits without consulting the register, annual pulse | 90% | Annual |
8. Change control
| Date | Version | Change | Reason | Approved by |
|---|---|---|---|---|
| 2026-09-02 | 0.1 | Initial draft | IoL administrative pack | draft, unapproved |
| 2026-09-18 | 0.2 | Register rebuilt on the Dubai Health DOA Manual and the three IoL tiers named in the IOL-OPS pack (SDO Head of Finance, HAO, Dean); category table carries the DOA chapter and the level per transaction type; HAO named process owner. Tier values left for the HAO to state. | Merge of the OPS drafts into the AW pack | draft, unapproved |