diff --git a/deploy/certs.sls b/deploy/certs.sls
index 0b81a320cf09005834a7171899d1b0bd0ee48009..2b88c09df7a1fe58514ef34121328ca6cc6eda5d 100644
--- a/deploy/certs.sls
+++ b/deploy/certs.sls
@@ -21,14 +21,20 @@ deploy_cert_create_dir:
     - mode: 755
 {% endif %}
 
-{% for name, cert in deploy.certs.items() %}
 
+{% for name, cert in deploy.certs.items() %}
 {% set cert_group_name = 'cert-' + name %}
 
 deploy_cert_{{ name }}_group:
   group.present:
     - name: {{ cert_group_name }}
     - system: True
+{% if cert.users is defined %}
+    - addusers:
+{% for user in cert.users %}
+      - {{ user }}
+{% endfor %}
+{% endif %}
 
 {% if cert.pem is defined %}
 deploy_cert_{{ name }}_pem:
@@ -149,4 +155,5 @@ deploy_cert_{{ name }}_fullchain_dhparam:
       - group: deploy_cert_{{ name }}_group
 {% endif %}
 
+
 {% endfor %}