SHOW DELEGATED AUTHORIZATIONS: Secondary-role consent uses one row (Pending)¶

When the 2026_08 bundle is enabled, SHOW DELEGATED AUTHORIZATIONS shows a secondary-role grant on the primary consent row, in a secondary_roles column, and omits the companion row whose role_name is ALL. The grant itself doesn’t change.

Before the change:

A consent that grants secondary roles returns two rows: one for the session role, and one with role_name of ALL.

Copy code

SHOW DELEGATED AUTHORIZATIONS;
-- role_name | PUBLIC
-- role_name | ALL

After the change:

The same consent returns one row. secondary_roles is ALL when the consent grants every secondary role, and NONE when it doesn’t. A standalone ALL row that has no primary-role row for the same user and integration is still returned.

Copy code

SHOW DELEGATED AUTHORIZATIONS;
-- role_name | secondary_roles
-- PUBLIC    | ALL

How to update your code¶

If you look for a row with role_name of ALL to detect a secondary-role grant, read secondary_roles on the primary row. Also keep handling a standalone row whose role_name is ALL when that user and integration have no primary-role row. That standalone row is still returned.

Ref: 2426