Question: How to implement role based access with this setup?

I have a basic user and admin user, admin can see more screens.
The role is defined on the user model, but can also be defined on custom claims.

Any tips on how to set up the router would be appreciated. Thank you very much.