You could make a patient in the UI then fetch it or

POST

a patient and then look at it in the UI or any combination. A Users purpose is to authenticate and authorize access. You use that users permissions to access data.