diff --git a/ansible/roles/authentik/files/enrollment-flow.yaml b/ansible/roles/authentik/files/enrollment-flow.yaml
index 03e998c..623c372 100644
--- a/ansible/roles/authentik/files/enrollment-flow.yaml
+++ b/ansible/roles/authentik/files/enrollment-flow.yaml
@@ -147,9 +147,7 @@ entries:
       target: !KeyOf flow
     model: authentik_flows.flowstagebinding
 
-  # 10. SET AS DEFAULT ENROLLMENT FLOW IN BRAND
-  - attrs:
-      flow_enrollment: !KeyOf flow
-    identifiers:
-      domain: authentik-default
-    model: authentik_tenants.tenant
+  # Note: Brand enrollment flow configuration must be done via API
+  # The tenant model is restricted in blueprints
+  # Use: PATCH /api/v3/core/tenants/{tenant_uuid}/
+  # Body: {"flow_enrollment": "<flow_uuid>"}