diff --git a/scripts/aks-flex-config b/scripts/aks-flex-config
index 313d3e57..59f67ab8 100755
--- a/scripts/aks-flex-config
+++ b/scripts/aks-flex-config
@@ -282,6 +282,7 @@ def build_parser() -> argparse.ArgumentParser:
     return parser
 
 
+# TODO: Remove client-side RBAC setup after migrating to the AKS RP managed API and Azure CLI extension.
 RBAC_MANIFEST = """
 apiVersion: rbac.authorization.k8s.io/v1
 kind: ClusterRoleBinding
@@ -305,19 +306,6 @@ roleRef:
   kind: ClusterRole
   name: system:certificates.k8s.io:certificatesigningrequests:nodeclient
 subjects:
-- apiGroup: rbac.authorization.k8s.io
-  kind: Group
-  name: system:bootstrappers:aks-flex-node
----
-apiVersion: rbac.authorization.k8s.io/v1
-kind: ClusterRoleBinding
-metadata:
-  name: aks-flex-node-role
-roleRef:
-  apiGroup: rbac.authorization.k8s.io
-  kind: ClusterRole
-  name: system:node
-subjects:
 - apiGroup: rbac.authorization.k8s.io
   kind: Group
   name: system:bootstrappers:aks-flex-node