ADGM
FSRA Authorisation in ADGM: An Overview
· 6 min read · By Aureus Worldwide
FSRA authorisation in ADGM is the process by which the Financial Services Regulatory Authority grants a firm permission to carry on regulated financial services in the Abu Dhabi Global Market. If your business will manage money, deal, advise, arrange, lend, take deposits, provide custody, insure or handle virtual assets by way of business, you almost certainly need it. This overview explains who needs FSRA authorisation, the legal framework behind it, what a Financial Services Permission covers, the application journey, and the capital and personnel the regulator expects, so you can plan realistically before you begin.
Who needs FSRA authorisation
ADGM draws a firm line between two kinds of entity, and getting on the right side of it is the first decision to make:
- Regulated firms carry on a regulated financial service and must be authorised by the FSRA before they operate. Banks, fund and asset managers, brokers, advisers, arrangers, custodians, insurers, money-services businesses and virtual-asset firms all sit here.
- Non-regulated entities, holding companies, SPVs, foundations, family offices, tech startups, and professional or advisory firms that are not providing a regulated financial service, register with the ADGM Registration Authority and are not FSRA-authorised.
The test is whether your activity is a regulated financial service conducted by way of business. Our guide to regulated activities in ADGM sets out the full list, and our ADGM company setup guide covers the corporate registration route for non-financial businesses.
The legal framework: FSMR and the rulebooks
FSRA authorisation rests on the Financial Services and Markets Regulations (FSMR), ADGM's primary financial-services legislation, drafted in the common-law tradition and broadly aligned with international standards. Beneath the FSMR sit the FSRA's rulebooks, which fill in the detail:
- GEN, general provisions, including the authorisation regime and controlled functions.
- PRU, prudential requirements (capital) for investment firms and banks.
- PIN, prudential rules for insurers.
- COBS, conduct of business.
- AML, anti-money-laundering and sanctions obligations.
Because this framework mirrors familiar international regulation, firms and advisers who have operated in London, Singapore or the DIFC find the concepts recognisable, even though ADGM is a distinct jurisdiction.
The Financial Services Permission
The licence itself is the Financial Services Permission (FSP). An FSP is not a general banking or investment licence; it is a precise list of the regulated activities the firm may carry on, together with any conditions or restrictions the FSRA attaches, for example, that the firm may deal only with Professional Clients, or may not hold client money. Operating outside the scope of your FSP is a serious breach, so the permission is scoped carefully to match the business at the outset and varied later as the business grows.
The authorisation journey
While every case differs, a typical path looks like this:
- Pre-application engagement. Many applicants discuss the proposition with the FSRA before filing, to surface issues early.
- Prepare the Regulatory Business Plan. A credible, detailed description of the business model, target clients, activities, operations, governance and financial projections.
- Build the supporting framework. Compliance and AML manuals, risk and systems-and-controls documentation, and the prudential (capital) analysis.
- Nominate key individuals. The people who will hold controlled functions must be identified and shown to be fit and proper.
- Submit the application to the FSRA with the business plan, financials, policies and individual applications.
- Assessment and In-Principle Approval. The FSRA reviews and, when satisfied, may issue an In-Principle Approval with conditions to be met, such as injecting capital, securing premises and finalising staffing.
- Grant of the FSP. Once conditions are met, the FSRA grants the permission and the firm can begin regulated business.
Fit and proper: approved persons and controlled functions
The FSRA authorises the firm and, separately, approves the individuals who run it. Key controlled functions typically include a Senior Executive Officer (SEO), a Finance Officer, a Compliance Officer and a Money Laundering Reporting Officer (MLRO). Each nominated person must demonstrate the integrity, competence and financial soundness the FSRA expects. Smaller firms can sometimes combine roles or use outsourced support, subject to the regulator's agreement. Our ADGM finance-officer guide explains the Finance Officer function, and our compliance officers service supports the compliance and MLRO roles.
Fitness is not a one-off gate. Approved persons must remain fit and proper for as long as they hold their function, and the firm must notify the FSRA of anything that could affect that judgement, a regulatory action elsewhere, a criminal matter, or a significant change in someone's circumstances. Because these roles carry personal regulatory responsibility, they should be filled by people with the time, seniority and competence the function genuinely requires, not by names on an organisation chart.
Capital, systems and AML
Authorisation is not granted on a plan alone; the firm must be financially and operationally sound:
- Capital. The firm is placed in a prudential category that determines its base capital and ongoing capital requirement, explained in our note on FSRA prudential categories.
- Systems and controls proportionate to the business, covering governance, risk, record-keeping and technology.
- AML and sanctions. A risk-based anti-money-laundering framework, an appointed MLRO and ongoing monitoring, see our AML consulting service.
The FSRA's threshold conditions
Underneath the paperwork, the FSRA is testing whether the firm meets its threshold conditions, the standards an authorised firm must satisfy at authorisation and keep meeting afterwards. In broad terms it asks whether the firm:
- has a legal form and location of management appropriate to its business, with its mind and management in ADGM;
- holds adequate financial resources for the activities it will carry on;
- is fit and proper, including its owners, controllers and key individuals;
- has adequate systems, controls and compliance arrangements; and
- can be effectively supervised, with a transparent business model not structured to frustrate oversight.
These conditions are why authorisation is a judgement about the whole firm, not a checklist. A technically complete application can still be refused if the FSRA is not satisfied the firm can be run soundly, and, equally, the firm must keep meeting the conditions for the life of its permission.
Timeline, fees and ongoing supervision
Because authorisation is a substantive review rather than a form-filling exercise, applicants should plan for a process measured in months, not days, and budget for FSRA application and annual supervision fees (which the regulator sets and revises, confirm current figures directly). Authorisation then brings continuing obligations: maintaining capital, filing regulatory returns, keeping audited accounts, notifying the FSRA of material changes, and submitting to ongoing supervision. Building a disciplined finance and compliance function from the start keeps this manageable. Our DIFC and ADGM service helps you plan the journey.
How Aureus Worldwide can help
Aureus Worldwide is a Dubai-based accounting, tax, CFO and compliance-advisory firm. The regulatory authorisation itself is led by specialist counsel and granted by the FSRA. Our role is to make the financial substance of your application robust, preparing the financial projections in your Regulatory Business Plan, setting up accounting and reporting to the required standard, providing outsourced CFO and Finance-Officer support, and framing your AML processes. We keep the authorised firm compliant with tax and prepare audit-ready books alongside your appointed auditor, working with your DIFC and ADGM and legal advisers. To plan the finance side of an FSRA authorisation, contact us.
Frequently asked questions
Who needs FSRA authorisation?
Any firm that carries on a regulated financial service by way of business in or from ADGM needs FSRA authorisation, banks, fund and asset managers, advisers, arrangers, brokers, custodians, insurers and virtual-asset firms among them. A Financial Services Permission sets out exactly which regulated activities the firm may perform. Non-financial businesses register with the ADGM Registration Authority instead and are not FSRA-authorised.
What is a Financial Services Permission?
A Financial Services Permission (FSP) is the licence the FSRA grants an authorised firm. It lists the specific regulated activities the firm may conduct and any conditions or restrictions attached. The firm must operate within the scope of its FSP and keep meeting the conditions on which it was granted.
How long does FSRA authorisation take?
There is no fixed period. Authorisation is a substantive review of the business plan, capital, systems and key individuals, so applicants should plan for a process measured in months rather than weeks, often preceded by pre-application engagement with the FSRA. The timeline depends on the complexity of the business and the quality of the application.
Does every ADGM company need FSRA authorisation?
No. Only firms conducting regulated financial services need FSRA authorisation. Holding companies, SPVs, foundations, family offices, tech and advisory firms register with the ADGM Registration Authority and are not FSRA-authorised. Confirm which path applies to your activity before you commit.