When to consider both 1028 and 1029 config parameters in SAP GRC

[former_member812430]

usually we lock and expire ID's who left organization so for Risk analysis to exclude expired and locked user id's do we need to set both 1028 and 1029 parameters to NO, or 1028 is enough as we put expire date on locked user ID's.

[AlexGourdet]

Thank you for visiting SAP Community to get answers to your questions.

As you're looking to get most out of your community membership, please consider include a profile picture to increase user engagement & additional resources to your reference that can really benefit you:

• Profile https://developers.sap.com/tutorials/community-profile.html
• Tips for Questions: https://community.sap.com/resources/questions-and-answers
• Consider to take our Q&A tutorial at: https://developers.sap.com/tutorials/community-qa.html.

I hope you find this advice useful, and we're happy to have you as part of SAP Community!

All the best,

-Alex