issue #21055: allow users access to role-granted extensions