Skip to main content

RBAC built-in

Four roles. Every endpoint gated. UI mirrors server.

Owner / Admin / Operator / Viewer. Backend enforces on every mutating endpoint. useCan(slug, action) hook mirrors the policy in the dashboard so users never see buttons that would 403. RoleBadge chips on Members; /settings/memberships shows everyone their role at a glance.

Preview
z4j dashboard — RBAC built-in
Memberships Project: billing-prod AC Alice Chen alice@example.com Owner ⋯ BM Bob Martinez bob@example.com Admin ⋯ CS Carlos Silva carlos@example.com Operator ⋯ DP Diana Park diana@example.com Operator ⋯ EN Evan Nakamura evan@example.com Viewer ⋯

Mockup of the dashboard view for this feature. Live-reloading and themed to match your dashboard.

Ships with

  • Backend as source of truth
  • UI gates match server policy
  • Debounced 'Permission denied' toast on any 403
  • Per-project membership + last-admin protection
Related

More capabilities

Unified action surface

One button set. Every engine.

Learn more

Stuck-task reconciliation

Tasks started forever. Fixed, automatically.

Learn more

Historical trends

Success rate, failure rate, throughput over time.

Learn more

Ready to try z4j?

Install z4j Feature docs