How to safely implement roles in react app?

Question

React

Good day.
The application can have admins and users. For them, the functionality and some markup areas are different. Accordingly, the question arose, how to securely and elegantly differentiate access? The question is not about routing, but about storing the role (as long as the authorization token is stored).
If I save the role locally and the user changes it, at least the admin markup will open to him (for example, there will be menu items that are available only to administrators). The server, of course, will return 403 when trying to knock on a closed section, but I don't want to reveal to the average user what the administrators see.
If only the token is stored locally, and the role is in the state, then it turns out that every time the application starts, I will have to knock on the server and request permissions, and based on the data received, render the required set of components. Isn't it too redundant?
As is usually done in such situations, what is the most elegant way?
Thanks in advance.

Answer 1

When a user logs in, ask the server for user rights and save them, then check for isAdmin in the output places