Including Expired and locked users in batch risk analysis

[former_member106240]

Hi All,

Is it a good practice to include expired and locked users in batch risk analysis?

will it leads any performance issues especially when BRA is scheduled for 3 times a day.?

Thanks,

Tireesha

[Monsores]

Hi Tireesha.

I prefer to include locked users, as they can be in this status just for a very short term if they are locked due to wrong password attemps, for example.

For expired users it will depend a bit on your reactivation process. If you review their role assignments before reactivating they don't need to be included in batch risk analysis.

Regarding performance, this will depend on the proportion of locked and expired users you have in relation to the active ones, but in general it should not affect performance so much.

Regards,

Marcelo Monsores