diff --git a/changes/35333-less-heavy-team-get-on-conditional-access b/changes/35333-less-heavy-team-get-on-conditional-access
new file mode 100644
index 0000000000..6d94d46ebb
--- /dev/null
+++ b/changes/35333-less-heavy-team-get-on-conditional-access
@@ -0,0 +1 @@
+* Use a lighter-weight query for checking if a team is enabled for conditional access.
diff --git a/server/service/osquery.go b/server/service/osquery.go
index e045a67449..e7d25b0841 100644
--- a/server/service/osquery.go
+++ b/server/service/osquery.go
@@ -2439,7 +2439,7 @@ func (svc *Service) conditionalAccessConfiguredAndEnabledForTeam(ctx context.Con
 	}
 
 	// Host belongs to a team, thus we load the team configuration.
-	team, err := svc.ds.Team(ctx, *hostTeamID)
+	team, err := svc.ds.TeamWithoutExtras(ctx, *hostTeamID)
 	if err != nil {
 		return false, false, ctxerr.Wrap(ctx, err, "failed to load team config")
 	}