Almadar A company that's grown from a single office in Al Malaz to two locations across Riyadh usually still runs approval limits on memory rather than a documented framework.
This sits directly alongside policies and procedures and feeds straight into the risk control matrix, since a control that requires a specific approval level is only as reliable as everyone's actual, current understanding of who holds that authority.
Why informal delegation eventually causes real problems
In a smaller, founder-run company, approval authority is usually clear because the founder approves nearly everything personally. As the business grows and approval gets pushed down to department heads and regional managers, the informal understanding of who can approve what starts to diverge from person to person, and nobody notices until two people both believe they had the authority to approve the same contract, or nobody believed they did and a decision stalled for weeks.
What a proper framework actually specifies
For each transaction type, procurement, capital expenditure, payroll changes, contract signing, banking transactions, the framework specifies the approval threshold by value, who holds authority at each threshold, whether a second approval is required above a higher threshold, and what happens when the primary approver is unavailable.
Keeping the framework aligned with the actual organization
A delegation framework needs to be updated every time the organizational structure changes, a new regional manager is appointed, a department is restructured, or a role is eliminated, otherwise the document quietly drifts out of sync with reality in exactly the way a stale internal control framework does.
Handling emergencies without breaking the rules
A well-designed framework also covers what happens when normal approval channels aren't available, an approver traveling, a system outage during month-end close, without simply suspending controls under pressure. A clear, pre-agreed emergency delegation path prevents the common failure mode where people bypass approval entirely because the documented process didn't anticipate a real-world disruption.
Groups operating across Riyadh often need city or entity-specific delegation limits, since a regional manager in overseeing supplier relationships for an industrial operation may reasonably need higher procurement authority than a similarly titled role in a smaller sales office, and a single uniform limit across both roles tends to either over-restrict one or under-control the other.