diff --git a/backend/src/ee/services/license/license-fns.ts b/backend/src/ee/services/license/license-fns.ts
index 496b217ca..c54daa3a6 100644
--- a/backend/src/ee/services/license/license-fns.ts
+++ b/backend/src/ee/services/license/license-fns.ts
@@ -31,10 +31,10 @@ export const getDefaultOnPremFeatures = (): TFeatureSet => ({
   auditLogStreamLimit: 3,
   samlSSO: false,
   hsm: false,
-  oidcSSO: true,
+  oidcSSO: false,
   scim: false,
   ldap: false,
-  groups: true,
+  groups: false,
   status: null,
   trial_end: null,
   has_used_trial: true,
diff --git a/docs/internals/permissions.mdx b/docs/internals/permissions.mdx
index 54e3d1082..737d3b71e 100644
--- a/docs/internals/permissions.mdx
+++ b/docs/internals/permissions.mdx
@@ -93,7 +93,6 @@ Permission inversion allows you to explicitly deny actions instead of allowing t
 - secret-folders
 - secret-imports
 - dynamic-secrets
-- cmek
 
 When a permission is inverted, it changes from an "allow" rule to a "deny" rule. For example:
 
diff --git a/frontend/src/hooks/api/groups/queries.tsx b/frontend/src/hooks/api/groups/queries.tsx
index b219f19d6..eb10085bc 100644
--- a/frontend/src/hooks/api/groups/queries.tsx
+++ b/frontend/src/hooks/api/groups/queries.tsx
@@ -6,8 +6,6 @@ import { EFilterReturnedUsers, TGroup, TGroupUser } from "./types";
 
 export const groupKeys = {
   getGroupById: (groupId: string) => [{ groupId }, "group"] as const,
-  isGroupMembershipManagementDisabled: (orgId: string) =>
-    ["group-memberships-management-disabled", orgId] as const,
   allGroupUserMemberships: () => ["group-user-memberships"] as const,
   forGroupUserMemberships: (slug: string) =>
     [...groupKeys.allGroupUserMemberships(), slug] as const,