diff --git a/tailcfg/tailcfg.go b/tailcfg/tailcfg.go
index a1d6a08a2..730612418 100644
--- a/tailcfg/tailcfg.go
+++ b/tailcfg/tailcfg.go
@@ -573,6 +573,7 @@ type MapResponse struct {
 	Domain       string
 	PacketFilter []FilterRule
 	UserProfiles []UserProfile
+	Roles        []Role // deprecated; clients should not rely on Roles
 	// TODO: Groups       []Group
 	// TODO: Capabilities []Capability