What made you choose Hasura over Postgraphile? RBAC is a postgres feature, not sure if that would affect the decision?
These roles can be assigned to a frontend session by generating signed JWTs.
With Postgres RBAC, you'd need something to lift the roles to be consumed by the frontend. With Hasura it works out of the box.
Also, I did consider using Postgraphile, but it was easier to get started with Hasura, so I went ahead with it. I don't have enough info to make a comparison.