diff --git a/README.md b/README.md
index 4b71e16..2abf23a 100644
--- a/README.md
+++ b/README.md
@@ -99,6 +99,7 @@ The `terraform-docs` utility is used to generate this README. Follow the below s
 | <a name="input_wayfinder_idp_details"></a> [wayfinder\_idp\_details](#input\_wayfinder\_idp\_details) | The IDP details to use for Wayfinder to enable SSO. | <pre>object({<br>    type          = string<br>    clientId      = optional(string)<br>    clientSecret  = optional(string)<br>    serverUrl     = optional(string)<br>    azureTenantId = optional(string)<br>  })</pre> | <pre>{<br>  "azureTenantId": "",<br>  "clientId": null,<br>  "clientSecret": null,<br>  "serverUrl": "",<br>  "type": "none"<br>}</pre> | no |
 | <a name="input_wayfinder_instance_id"></a> [wayfinder\_instance\_id](#input\_wayfinder\_instance\_id) | The instance ID to use for Wayfinder. | `string` | n/a | yes |
 | <a name="input_wayfinder_licence_key"></a> [wayfinder\_licence\_key](#input\_wayfinder\_licence\_key) | The licence key to use for Wayfinder. | `string` | n/a | yes |
+| <a name="input_wayfinder_no_defaults"></a> [wayfinder\_no\_defaults](#input\_wayfinder\_no\_defaults) | Set to true to stop Wayfinder from applying compiled-in defaults (e.g. default roles, cluster plans, etc). | `bool` | `true` | no |
 | <a name="input_wayfinder_release_channel"></a> [wayfinder\_release\_channel](#input\_wayfinder\_release\_channel) | The release channel to use for Wayfinder. | `string` | `"wayfinder-releases"` | no |
 | <a name="input_wayfinder_version"></a> [wayfinder\_version](#input\_wayfinder\_version) | The version to use for Wayfinder. | `string` | `"v2.7.4"` | no |
 
diff --git a/manifests/wayfinder-values.yml.tpl b/manifests/wayfinder-values.yml.tpl
index ed4efa5..47a7e4c 100644
--- a/manifests/wayfinder-values.yml.tpl
+++ b/manifests/wayfinder-values.yml.tpl
@@ -21,6 +21,7 @@ enableLocalAdminUser: ${enable_localadmin_user}
 mysql:
   pvc:
     storageClass: "${storage_class}"
+noDefaults: ${no_defaults}
 ui:
   enabled: true
   endpoint:
diff --git a/variables.tf b/variables.tf
index 8fcfe22..0e25466 100644
--- a/variables.tf
+++ b/variables.tf
@@ -224,6 +224,12 @@ variable "wayfinder_licence_key" {
   sensitive   = true
 }
 
+variable "wayfinder_no_defaults" {
+  description = "Set to true to stop Wayfinder from applying compiled-in defaults (e.g. default roles, cluster plans, etc)."
+  type        = bool
+  default     = true
+}
+
 variable "wayfinder_release_channel" {
   description = "The release channel to use for Wayfinder."
   type        = string
diff --git a/wayfinder.tf b/wayfinder.tf
index c457974..7c5dd8d 100644
--- a/wayfinder.tf
+++ b/wayfinder.tf
@@ -165,6 +165,7 @@ resource "helm_release" "wayfinder" {
       api_hostname                  = var.wayfinder_domain_name_api
       disable_local_login           = var.wayfinder_idp_details["type"] == "none" ? false : var.disable_local_login
       enable_localadmin_user        = var.create_localadmin_user
+      no_defaults                   = var.wayfinder_no_defaults
       storage_class                 = "${var.eks_encrypted_sc_type}-encrypted"
       ui_hostname                   = var.wayfinder_domain_name_ui
       wayfinder_iam_identity        = module.wayfinder_irsa_role.iam_role_arn