diff --git a/settings/controller/certificatecontroller.php b/settings/controller/certificatecontroller.php
index d9026cd42afef7a820befcd764bfae533083254d..ea20b7c587f6125ee65fca1d5bff84d4e7d88d24 100644
--- a/settings/controller/certificatecontroller.php
+++ b/settings/controller/certificatecontroller.php
@@ -54,6 +54,9 @@ class CertificateController extends Controller {
 
 	/**
 	 * Add a new personal root certificate to the users' trust store
+	 *
+	 * @NoAdminRequired
+	 * @NoSubadminRequired
 	 * @return array
 	 */
 	public function addPersonalRootCertificate() {
@@ -82,6 +85,9 @@ class CertificateController extends Controller {
 
 	/**
 	 * Removes a personal root certificate from the users' trust store
+	 *
+	 * @NoAdminRequired
+	 * @NoSubadminRequired
 	 * @param string $certificateIdentifier
 	 * @return DataResponse
 	 */