Skip to main content
Xoxoday Loyalife supports group creation and role-based rights assignment at both the individual user level and the entire organisation level, giving administrators precise control over who can access, configure, and manage loyalty programs.

Group Creation and Access Control in Xoxoday Loyalife

Xoxoday Loyalife provides a structured group management framework that allows administrators to define, organise, and govern access across the platform. Groups can be created to mirror your internal organisational hierarchy — by department, business unit, geography, or any custom segmentation your organisation requires. This ensures that loyalty program administration scales cleanly as your workforce grows or restructures. Each group can be assigned a distinct set of rights, controlling what members of that group can view, edit, approve, or publish within Xoxoday Loyalife. For example, a regional HR team in a distributed enterprise can be granted rights to manage reward catalogues for their territory without accessing configurations belonging to other regions. This keeps programme management decentralised while maintaining central governance.

Individual Role-Level Rights Assignment

Beyond group-level access, Xoxoday Loyalife supports rights assignment at the individual role level. Administrators can configure specific permissions for roles such as Programme Manager, Approver, Redeemer, or Finance Reviewer, ensuring each persona interacts only with the features and data relevant to their function. This is particularly valuable in organisations that integrate Xoxoday Loyalife with HRMS platforms like Workday, SAP SuccessFactors, or Darwinbox, where employee role data can inform access provisioning. When an employee’s role changes in the source system, their Xoxoday Loyalife access rights can be updated accordingly, reducing the risk of privilege creep.

Organisation-Level Rights and Governance

At the highest level, Xoxoday Loyalife allows platform-wide policies to be set for an entire organisation. Organisation-level administrators can define default access templates, enforce permission boundaries, and manage overarching programme settings that cascade down to all groups and roles beneath them. This hierarchical model supports enterprise compliance requirements aligned with frameworks such as ISO 27001 and SOC 2 Type II, where separation of duties and least-privilege access are audit requirements. An organisation running a global loyalty programme — spanning multiple subsidiaries or business lines — can configure Xoxoday Loyalife so that group-level admins operate within boundaries set at the organisational tier.

Practical Example

Consider a large retail enterprise with separate loyalty programmes for its e-commerce, in-store, and partner channels. Using Xoxoday Loyalife’s group creation capabilities, the central IT team can create three distinct groups, assign programme-specific rights to each, and retain organisation-level controls for budgeting and compliance reporting — all from a single administrative interface without cross-contamination between programme teams. This combination of granular role permissions and broad organisational controls makes Xoxoday Loyalife suitable for enterprises that need both flexibility at the team level and rigorous governance at the top. Learn more: Xoxoday Loyalife Help Centre — Security

User roles and permission levels

Understand the built-in roles available in Xoxoday Loyalife and how permissions are structured across the platform.

Audit logs and activity tracking

Learn how Xoxoday Loyalife records administrative actions and access events to support compliance and internal audits.