diff --git a/lib/services/role.go b/lib/services/role.go
index <HASH>..<HASH> 100644
--- a/lib/services/role.go
+++ b/lib/services/role.go
@@ -117,8 +117,6 @@ func NewImplicitRole() Role {
 			},
 			Allow: RoleConditions{
 				Namespaces: []string{defaults.Namespace},
-				Logins:     []string{teleport.TraitInternalRoleVariable},
-				NodeLabels: map[string]string{Wildcard: Wildcard},
 				Rules:      CopyRulesSlice(DefaultImplicitRules),
 			},
 		},
Remove allowed logins and labels from implicit role.