2017 NEC 250.146(A):
"(A) Surface-Mounted Box. Where the box is mounted on the surface, direct metal-to-metal contact between the device yoke and the box or a contact yoke or device that complies with 250.146(B) shall be permitted to ground the receptacle to the box. At least one of the insulating washers shall be removed from receptacles that do not have a contact yoke or device that complies with 250.146(B) to ensure direct metal-to-metal
contact. This provision shall not apply to cover-mounted receptacles unless the box and cover combination are listed as providing satisfactory ground continuity between the box and the receptacle. A listed exposed work cover shall be permitted to be the grounding and bonding means when (1) the device is attached to the cover with at least two fasteners that are permanent (such as a rivet) or have a thread locking or screw or nut
locking means and (2) when the cover mounting holes are located on a flat non-raised portion of the cover."
Cheers, Wayne