I ended up to this:

• On the frontend side check if there's JWT with required role (no verification, so it's fast)
• If yes, then I'm calling separate /endpoint implemented on the backend to verify that JWT is valid, not expired and contains required role.
• If backend verified that everything is okay then I'm rendering this on UI.

It's probably bad approach (because even if I'm an admin I need to wait for additional request to be finished) but it works. There is a mention about server side rendering in the comments but I didn't have enough time to invest into researching & implementing this even though it's probably the way to go.