diff --git a/control/controlclient/direct.go b/control/controlclient/direct.go
index bb2e6854b..7703f36b9 100644
--- a/control/controlclient/direct.go
+++ b/control/controlclient/direct.go
@@ -656,7 +656,6 @@ func (c *Direct) PollNetMap(ctx context.Context, maxPolls int, cb func(*NetworkM
 			User:         resp.Node.User,
 			UserProfiles: make(map[tailcfg.UserID]tailcfg.UserProfile),
 			Domain:       resp.Domain,
-			Roles:        resp.Roles,
 			DNS:          resp.DNSConfig,
 			Hostinfo:     resp.Node.Hostinfo,
 			PacketFilter: c.parsePacketFilter(resp.PacketFilter),
diff --git a/control/controlclient/netmap.go b/control/controlclient/netmap.go
index 819560ab1..05ad6e2e0 100644
--- a/control/controlclient/netmap.go
+++ b/control/controlclient/netmap.go
@@ -49,7 +49,6 @@ type NetworkMap struct {
 	// TODO(crawshaw): reduce UserProfiles to []tailcfg.UserProfile?
 	// There are lots of ways to slice this data, leave it up to users.
 	UserProfiles map[tailcfg.UserID]tailcfg.UserProfile
-	Roles        []tailcfg.Role
 	// TODO(crawshaw): Groups       []tailcfg.Group
 	// TODO(crawshaw): Capabilities []tailcfg.Capability
 }
diff --git a/tailcfg/tailcfg.go b/tailcfg/tailcfg.go
index a55374829..631201c5a 100644
--- a/tailcfg/tailcfg.go
+++ b/tailcfg/tailcfg.go
@@ -114,7 +114,6 @@ type UserProfile struct {
 	LoginName     string // "alice@smith.com"; for display purposes only (provider is not listed)
 	DisplayName   string // "Alice Smith"
 	ProfilePicURL string
-	Roles         []RoleID
 }
 
 type Node struct {
@@ -554,7 +553,6 @@ type MapResponse struct {
 	Domain       string
 	PacketFilter []FilterRule
 	UserProfiles []UserProfile
-	Roles        []Role
 	// TODO: Groups       []Group
 	// TODO: Capabilities []Capability