Yep! Hasura allows you to configure access control rules which are namespaced by "roles" that you can attach to your tables.

Each permission rule can reference a session variable that comes in from your authentication system (whatever it is).

Docs: https://docs.hasura.io/1.0/graphql/manual/auth/index.html

Examples: https://docs.hasura.io/1.0/graphql/manual/auth/common-roles-...