diff --git a/changelog/22191.txt b/changelog/22191.txt
new file mode 100644
index 000000000..9fa7c85d5
--- /dev/null
+++ b/changelog/22191.txt
@@ -0,0 +1,3 @@
+```release-note:improvement
+ui: adds allowed_user_ids field to create role form and user_ids to generate certificates form in pki
+```
\ No newline at end of file
diff --git a/ui/app/models/pki/certificate/generate.js b/ui/app/models/pki/certificate/generate.js
index cdccc2cd4..c3351c46b 100644
--- a/ui/app/models/pki/certificate/generate.js
+++ b/ui/app/models/pki/certificate/generate.js
@@ -9,7 +9,7 @@ import PkiCertificateBaseModel from './base';
 
 const generateFromRole = [
   {
-    default: ['commonName', 'customTtl', 'format', 'privateKeyFormat'],
+    default: ['commonName', 'userIds', 'customTtl', 'format', 'privateKeyFormat'],
   },
   {
     'Subject Alternative Name (SAN) Options': [
diff --git a/ui/app/models/pki/role.js b/ui/app/models/pki/role.js
index ea7455191..78fdb44b2 100644
--- a/ui/app/models/pki/role.js
+++ b/ui/app/models/pki/role.js
@@ -55,6 +55,7 @@ const fieldGroups = [
   },
   {
     'Additional subject fields': [
+      'allowedUserIds',
       'allowedSerialNumbers',
       'requireCn',
       'useCsrCommonName',
@@ -293,6 +294,7 @@ export default class PkiRoleModel extends Model {
   })
   extKeyUsageOids;
 
+  @attr({ editType: 'stringArray' }) allowedUserIds;
   @attr({ editType: 'stringArray' }) organization;
   @attr({ editType: 'stringArray' }) country;
   @attr({ editType: 'stringArray' }) locality;