diff --git a/settings/controller/certificatecontroller.php b/settings/controller/certificatecontroller.php
index facf928bc73cd92d6498776e1d316a32bbc9239d..ea20b7c587f6125ee65fca1d5bff84d4e7d88d24 100644
--- a/settings/controller/certificatecontroller.php
+++ b/settings/controller/certificatecontroller.php
@@ -56,6 +56,7 @@ class CertificateController extends Controller {
 	 * Add a new personal root certificate to the users' trust store
 	 *
 	 * @NoAdminRequired
+	 * @NoSubadminRequired
 	 * @return array
 	 */
 	public function addPersonalRootCertificate() {
@@ -86,6 +87,7 @@ class CertificateController extends Controller {
 	 * Removes a personal root certificate from the users' trust store
 	 *
 	 * @NoAdminRequired
+	 * @NoSubadminRequired
 	 * @param string $certificateIdentifier
 	 * @return DataResponse
 	 */