diff --git a/fast/stages/0-bootstrap/organization.tf b/fast/stages/0-bootstrap/organization.tf
index 66646c06c0..c5928c8489 100644
--- a/fast/stages/0-bootstrap/organization.tf
+++ b/fast/stages/0-bootstrap/organization.tf
@@ -141,10 +141,6 @@ module "organization" {
   # delegated role grant for resource manager service account
   iam_bindings = merge(
     {
-      organization_ngfw_enterprise_admin = {
-        members = [local.principals.gcp-network-admins]
-        role    = module.organization.custom_role_id["ngfw_enterprise_admin"]
-      }
       organization_iam_admin_conditional = {
         members = [module.automation-tf-resman-sa.iam_email]
         role    = module.organization.custom_role_id["organization_iam_admin"]
diff --git a/tests/fast/stages/s0_bootstrap/simple.yaml b/tests/fast/stages/s0_bootstrap/simple.yaml
index 8ff799b0b5..02e1e3c8ad 100644
--- a/tests/fast/stages/s0_bootstrap/simple.yaml
+++ b/tests/fast/stages/s0_bootstrap/simple.yaml
@@ -20,7 +20,7 @@ counts:
   google_logging_organization_sink: 4
   google_logging_project_bucket_config: 4
   google_org_policy_policy: 24
-  google_organization_iam_binding: 28
+  google_organization_iam_binding: 27
   google_organization_iam_custom_role: 12
   google_organization_iam_member: 29
   google_project: 3
@@ -41,7 +41,7 @@ counts:
   google_tags_tag_value: 2
   local_file: 10
   modules: 20
-  resources: 235
+  resources: 234
 
 outputs:
   automation: __missing__