I am noticing that a PowerUser profile that was able to do something before (view user certificates) was not doing it currently.
So I went into the system and turned off and on the only custom permission related to the activity for the PowerUser profile. And voila! It started working for that user.
The question of the day. Is this normal with change / deployments??? Or it could it have been an order of operations thing? Potentially...but I dont think so….