E-Verify user roles: what program administrators, general users and corporate administrators can do

An E-Verify employer account has two user roles. As of November 2026, every account must have at least one program administrator, who registers and removes users, manages the company profile and can create cases, and may have any number of general users, who create and manage cases and view reports. A corporate administrator is a separate account type that oversees several employer accounts and cannot create cases. Every user must pass the E-Verify tutorial before creating or managing cases, and browser users sign in through Login.gov with multifactor authentication.

Getting roles right matters more than it looks: the wrong person with access can create a case before an offer is accepted, and a departed user with live access is a compliance gap under the MOU. This page covers the roles, the training and sign-in rules, and how to add and remove people. For enrolling the company itself, see E-Verify enrollment steps.

Which roles exist in an E-Verify account?

The location rule comes from E-Verify's FAQ, which defines the United States as the 50 states, the District of Columbia, Puerto Rico, the U.S. Virgin Islands, Guam and the Northern Mariana Islands. Section 6.1 notes that both user roles are responsible for following program rules and staying informed of changes to E-Verify policies and procedures.

What can a program administrator do that a general user cannot?

Section 6.1 lists the program administrator's permissions:

• Registering new users and creating accounts for other program administrators and general users.
• Creating and managing cases, and viewing reports, which general users can also do.
• Updating their own program administrator profile and reactivating user accounts.
• Closing user accounts and the company account.

Other parts of E-Verify add to that list:

• Company profile. Program administrators keep the company information, employer category, addresses and hiring sites current (Section 7.3) and manage points of contact.
• The MOU. Program administrators and corporate administrators who have completed the tutorial can view and print the company's MOU from Company Profile (FAQ).
• Reports. Section 5.0 makes the Case Creation Summary report available to all users, but the Historic Records Report and the Quick Audit Report only to program administrators and corporate administrators.
• Ending participation. A program administrator, corporate administrator or authorized employer representative requests termination of the company's participation (Section 7.4).

Case work is shared. Section 2.3 of the manual says program administrators and general users can update and close all cases created under the same employer account, regardless of who created them, so a case does not get stuck when its creator is on leave.

Which E-Verify roles are not user accounts?

• The MOU signatory electronically signs the E-Verify Terms and Conditions for the company. The signatory and a program administrator can be the same person; a signatory who is not also a user is recorded as a point of contact, which brings us to the next item.
• Points of contact are the people E-Verify contacts about the account. E-Verify's January 5, 2026 notice says adding someone as a point of contact does not give them access; to manage cases they must also be added as a program administrator. The MOU signatory is automatically a point of contact who cannot be removed, though their details can be updated.
• The enrollment point of contact enrolls the company. Section 1.3 separates enrollment, which happens once for the company, from registration, which is how program administrators add users afterward.

What must a user complete before creating a case?

1. The tutorial and knowledge test. Program administrators and general users must successfully complete E-Verify's online training before they can create or manage cases (Sections 1.4 and 6.1). E-Verify's FAQ says the tutorial takes about an hour and the knowledge test needs a score of at least 70 percent. Corporate administrators take their own tutorial.
2. Refresher tutorials when prompted. Under the MOU (Article II.A.5), a user who skips a required refresher tutorial cannot keep using E-Verify. E-Verify's FAQ says it announces enhancements that require tutorial updates in the system and on its What's New page.
3. The federal contractor tutorial, if it applies. When the company is designated a federal contractor with the FAR clause, every program administrator and general user must pass a contractor tutorial before using E-Verify again; see the E-Verify federal contractor rule.
4. Login.gov. Since July 1, 2025, browser users must sign in through Login.gov with multifactor authentication (notice). E-Verify's Login.gov page says each user needs their own Login.gov account with a unique email address, shared accounts are not allowed, and E-Verify support cannot reset a Login.gov password. It recommends at least two authentication methods. Web services access is not affected.

The rules each user signs up to are in Section 1.5: no pre-screening of applicants, no requests for specific Form I-9 documents beyond a photo on List B, no adverse action because of a mismatch, a case for every new hire by the third business day after the start of work for pay, and safeguarding personal information.

How do you add, change and remove users?

1. Add. From Company Account, select Manage Users, click Add User, enter the person's email address, choose General User or Program Administrator, accept or edit the user ID, and click Create User Account (Section 7.1).
2. Activate. The new user gets an email with an activation link, signs in or creates a Login.gov account with that email address, and completes the training from the dashboard (Section 6.2).
3. Change. Users edit their own name, email and phone from the dashboard; the changes apply to every user account linked to their profile (Section 6.3).
4. Remove. When someone leaves or no longer needs access, a program administrator deletes the account from Manage Users. Section 7.2.1 warns that deletion is permanent.

Removal is a contract term, not housekeeping. Article II.A.3 of the MOU says the employer will give access only to current employees who need it and must promptly end access for anyone who is separated or no longer needs it. E-Verify's account compliance page lists sharing login information among the things employers must not do.

Who should hold which role?

E-Verify does not prescribe job titles. These are practical suggestions that follow from the rules above:

• Two program administrators, not one. Mismatch deadlines run in federal government working days (see E-Verify tentative nonconfirmation), and a single administrator on vacation means nobody can add a replacement user.
• General users for the people who create cases, usually onboarding or HR coordinators who already handle Form I-9; E-Verify vs Form I-9 shows how the two processes connect.
• No access for recruiters or hiring managers who only screen candidates. E-Verify may not be used before an offer is accepted and Form I-9 is complete, and the MOU limits E-Verify information to people who carry out the employer's E-Verify duties (Article II.A.15).
• Offboarding checklists that include E-Verify, alongside email and payroll access.

Staffing agencies with several branches often give each enrolled hiring site its own trained users; see E-Verify for staffing agencies.

How do roles work in corporate and employer agent accounts?

In a corporate structure, the corporate administrator enrolls verification locations and manages their users and information, while each location still needs at least one program administrator (corporate manual 1.3). Employer agent accounts have program administrators and general users too, and since January 2026 general users on agent accounts can manage client point of contact information. See E-Verify employer agents.

What about the yearly account certification?

On June 23, 2026, E-Verify announced that users would have to validate and certify account information every 12 months, with only one user per account required to certify, 60 days from the first prompt to finish, and case creation blocked if certification lapsed. On July 16, 2026 it turned the feature off after technical problems, with no date for its return. As of November 2026, E-Verify's What's New page has not announced a restart, so decide now which program administrator will answer the prompt when it comes back.

A quarterly access review

• Review the user list in Manage Users against current HR staff.
• Delete anyone who left or changed jobs.
• Confirm at least two program administrators, both located in the United States.
• Check that every user has their own Login.gov account and no shared mailbox is used.
• Confirm points of contact, including the MOU signatory's details, are current.
• Check that required refresher tutorials are done.