Xoxoday Plum supports a Maker role within its role-based access control system, enabling designated users to create campaigns, configure budgets, and generate promo codes — all of which require sign-off from an assigned Approver before taking effect.
Role-Based Access Control in Xoxoday Plum Campaigns
Xoxoday Plum uses role-based access control (RBAC) to govern who can create, modify, and approve campaign activity. The Maker role sits at the heart of this system — it is the designated role for building and configuring campaigns from the ground up, enforcing a clear separation between the people who set up campaigns and the people who authorise them. This separation is not just a convenience. For organisations managing high-volume rewards programmes, it is a fundamental governance control that keeps campaign execution structured and auditable.What the Maker Role Can Do
A user assigned the Maker role in Xoxoday Plum has the authority to initiate all core campaign tasks without needing full administrative access. This makes it practical for HR operations teams or campaign managers to own campaign creation end to end. Campaign creation and configuration. Makers define campaign parameters — name, duration, target audience, and reward type — directly within the Xoxoday Plum campaign dashboard. Campaigns can be drafted and staged for approval without interrupting programmes already running. Budget definition and allocation. Budget management is built into the Maker workflow. Makers set campaign-level spending limits and allocate funds to specific reward pools, keeping finance teams in control of overall spend while campaign managers maintain execution velocity. Promo code generation and assignment. Makers create promo codes tied to specific campaigns and assign them to eligible participants. This is especially useful for time-bound promotions or partner incentive programmes where unique, trackable codes are needed for redemption and reporting.The Maker-Approver Workflow
Every action a Maker takes in Xoxoday Plum is staged rather than immediately executed. Before a campaign goes live, its budget is committed, or promo codes are activated, a designated Approver must review and authorise the submission. This two-step workflow mirrors the approval logic already embedded in enterprise tools such as Workday, SAP SuccessFactors, and Darwinbox — making adoption straightforward for teams already familiar with structured approval chains. The workflow keeps campaign velocity high while reducing the risk of misconfigured campaigns reaching employees or end recipients. Makers can build multiple campaigns in parallel; Approvers can review and authorise in batches or in real time, depending on your organisation’s cadence.Enterprise Governance and Audit Readiness
Xoxoday Plum’s RBAC framework — including the Maker role — is designed to satisfy the access-control and audit requirements that enterprise security teams expect, consistent with standards such as ISO 27001 and SOC 2 Type II. Teams managing seasonal campaigns, employee recognition drives, or sales incentive programmes can assign Maker access to programme managers without exposing sensitive administrative functions. Every Maker action is logged, giving Approvers and administrators a clear, auditable record of who initiated what and when. Learn more: Xoxoday Plum Help Centre — CampaignHow the Approver role works in campaigns
Understand how Approvers review and authorise Maker submissions before campaigns go live in Xoxoday Plum.
Campaign budget management in Xoxoday Plum
Learn how to set spending limits, allocate funds, and track budget utilisation across active campaigns.