diff --git a/roles/invite/templates/serverapplication.yml.j2 b/roles/invite/templates/serverapplication.yml.j2
index 441b7b658..26c97d432 100644
--- a/roles/invite/templates/serverapplication.yml.j2
+++ b/roles/invite/templates/serverapplication.yml.j2
@@ -75,15 +75,21 @@ crypto:
 
 cron:
   user-cleaner-expression: "0 0/30 * * * *"
+  user-cleaner-lock-at-least-for: "PT5M"
+  user-cleaner-lock-at-most-for: "PT28M"
   last-activity-duration-days: 1000
   role-expiration-notifier-expression: "0 0/30 * * * *"
   # Set to -1 to suppress role expiry notifications
   role-expiration-notifier-duration-days: 5
+  role-expiration-notifier-lock-at-least-for: "PT5M"
+  role-expiration-notifier-lock-at-most-for: "PT28M"
   metadata-resolver-initial-delay-milliseconds: 1
   metadata-resolver-fixed-rate-milliseconds: 86_400_000
   metadata-resolver-url: "https://metadata.{{ base_domain }}/idps-metadata.xml"
   # A value of 0 means no logs will be deleted
   purge-audit-log-days: 365
+  # A value of 0 means no invitations will be deleted
+  purge-expired-invitations-days: 365
 
 myconext:
   uri: "https://login.{{ myconext_base_domain }}/myconext/api/invite/provision-eduid"