Thanks. This fixed it for me. I had to remove the person from the list, then while re-adding them, made sure to check those Access to Certificates checkboxes which I hadn't checked off initially.

Thank you thank you! This checkbox is now under Users and Access -> click on the person -> Additional Resources