diff --git a/management/internals/network_map_db/pgsql/network_map_data.go b/management/internals/network_map_db/pgsql/network_map_data.go
index 6d150ca30..3f4b89eee 100644
--- a/management/internals/network_map_db/pgsql/network_map_data.go
+++ b/management/internals/network_map_db/pgsql/network_map_data.go
@@ -198,6 +198,9 @@ func buildPrivateServiceCandidates(svcs []service, domains []domain, proxyPeersB
 	}
 
 	for _, svc := range svcs {
+		if !svc.Enabled.Bool || !svc.Private.Bool {
+			continue
+		}
 		if len(svc.AccessGroups) == 0 {
 			continue
 		}