PostgreSQL version upgrade blocked

Question

PostgreSQL version upgrade blocked

Julia 40

I'm trying to upgrade Azure Database for PostgreSQL Flexible Server (locelle-stg-cac-db) from version 11 to 16. The upgrade fails because a role azure_pg_failover_slots_validator has the replication attribute which cannot be removed without superuser access. How can Azure support remove this attribute so the upgrade can proceed?

Pilladi Padma Sai Manisha 11,355 Reputation points Microsoft External Staff Moderator

2026-07-04T05:58:32.61+00:00

Hi @Julia
Thankyou for reaching microsoft Q&A!
Could you please share requested details in private message
Pilladi Padma Sai Manisha 11,355 Reputation points Microsoft External Staff Moderator

2026-07-17T18:37:21.5266667+00:00
Hi @Julia
The Major version upgrade from version 11 to 16 is failing on your Azure DB for PostgreSQL Flexible server due to pg_failover_slots_validator.

We sincerely apologize for the inconvenience caused to you. We have observed that the pg_failover_slots extension is enabled in shared_preload_libraries server parameter which is leading to this error. We recommend you to follow the below steps to mitigate this issue:

Navigate to your Azure Database for PostgreSQL Flexible Server.

Open Server Parameters.

Disable pg_failover_slots in shared_preload_libraries.

From our end we have observed few unsupported extensions enabled on your server which will block the MVU like timescaledb. So, we recommend you to please follow the provided documentation to disable unsupported extensions: Major Version Upgrades - Azure Database for PostgreSQL | Microsoft Learn

Major Version Upgrades - Azure Database for PostgreSQL | Microsoft Learn

Previous Major version upgrade seems to have failed due to unsupported password encryption. Please follow the instructions provided in the following documentation to change the encryption to SCRAM-SHA-256 for the server and users: SCRAM Auhtentication in Azure Database for PostgreSQL Flexible Server - Azure Database for PostgreS…

We also recommend reviewing the Microsoft documentation for Major Version Upgrades prior to performing the upgrade. The documentation provides details on prerequisites, supported upgrade scenarios, and known limitations that should be addressed before initiating the upgrade, helping to prevent precheck failures and ensure a successful upgrade:

Major Version Upgrades - Azure Database for PostgreSQL | Microsoft Learn
Pilladi Padma Sai Manisha 11,355 Reputation points Microsoft External Staff Moderator

2026-07-21T20:25:12.2166667+00:00
Hi @Julia
To help us investigate this further, could you please run the following query and share the output?

Additionally, we noticed that the server parameter azure.accepted_password_auth_method is currently set to MD5.

Could you please update this parameter to SCRAM-SHA-256, allow the change to take effect (restart if prompted), and then retry the major version upgrade?

Once completed, please let us know:

The output of the SELECT * FROM azure_roles_authtype(); query.

Whether the major version upgrade succeeds after changing the authentication method.

This information will help us continue the investigation.

Looking forward to your update.

Answer accepted by question author

0 additional answers

Your answer

Pilladi Padma Sai Manisha 11,355 Reputation points Microsoft External Staff Moderator

2026-07-04T05:58:32.61+00:00

Hi @Julia
Thankyou for reaching microsoft Q&A!
Could you please share requested details in private message
Pilladi Padma Sai Manisha 11,355 Reputation points Microsoft External Staff Moderator

2026-07-17T18:37:21.5266667+00:00

Hi @Julia
The Major version upgrade from version 11 to 16 is failing on your Azure DB for PostgreSQL Flexible server due to pg_failover_slots_validator.

We sincerely apologize for the inconvenience caused to you. We have observed that the pg_failover_slots extension is enabled in shared_preload_libraries server parameter which is leading to this error. We recommend you to follow the below steps to mitigate this issue:

Navigate to your Azure Database for PostgreSQL Flexible Server.

Open Server Parameters.

Disable pg_failover_slots in shared_preload_libraries.

From our end we have observed few unsupported extensions enabled on your server which will block the MVU like timescaledb. So, we recommend you to please follow the provided documentation to disable unsupported extensions: Major Version Upgrades - Azure Database for PostgreSQL | Microsoft Learn

Major Version Upgrades - Azure Database for PostgreSQL | Microsoft Learn

Previous Major version upgrade seems to have failed due to unsupported password encryption. Please follow the instructions provided in the following documentation to change the encryption to SCRAM-SHA-256 for the server and users: SCRAM Auhtentication in Azure Database for PostgreSQL Flexible Server - Azure Database for PostgreS…

We also recommend reviewing the Microsoft documentation for Major Version Upgrades prior to performing the upgrade. The documentation provides details on prerequisites, supported upgrade scenarios, and known limitations that should be addressed before initiating the upgrade, helping to prevent precheck failures and ensure a successful upgrade:

Major Version Upgrades - Azure Database for PostgreSQL | Microsoft Learn
Pilladi Padma Sai Manisha 11,355 Reputation points Microsoft External Staff Moderator

2026-07-21T20:25:12.2166667+00:00

Hi @Julia
To help us investigate this further, could you please run the following query and share the output?

Additionally, we noticed that the server parameter azure.accepted_password_auth_method is currently set to MD5.

Could you please update this parameter to SCRAM-SHA-256, allow the change to take effect (restart if prompted), and then retry the major version upgrade?

Once completed, please let us know:

The output of the SELECT * FROM azure_roles_authtype(); query.

Whether the major version upgrade succeeds after changing the authentication method.

This information will help us continue the investigation.

Looking forward to your update.

Answer 1

The role azure_pg_failover_slots_validator is created and owned by Azure's pg_failover_slots integration. It is not a customer role, and Flexible Server does not grant full PostgreSQL superuser access. Do not drop or alter it.

Run the major-version upgrade validation check and confirm this is the only blocker. Check whether pg_failover_slots is enabled in shared_preload_libraries. If you enabled the module and no longer use it, remove it from shared_preload_libraries, restart the server, remove the extension from each database where it is installed, and rerun validation. Test this on a point-in-time-restored server first.

If the module is not enabled, or validation still reports the Azure-managed role, the issue is not customer-remediable. Update your Azure support request with the server resource ID, source and target versions, validation output, operation correlation ID, and UTC timestamp. Ask the PostgreSQL Flexible Server team to correct the stale managed-role attribute. Rerun validation before attempting the upgrade again.