diff --git a/src/Microsoft.Agents.A365.DevTools.Cli/Commands/DeployCommand.cs b/src/Microsoft.Agents.A365.DevTools.Cli/Commands/DeployCommand.cs
index ce1b6639..59645bea 100644
--- a/src/Microsoft.Agents.A365.DevTools.Cli/Commands/DeployCommand.cs
+++ b/src/Microsoft.Agents.A365.DevTools.Cli/Commands/DeployCommand.cs
@@ -397,7 +397,7 @@ private static async Task EnsureMcpOauth2PermissionGrantsAsync(
 
         if (!ok) throw new InvalidOperationException("Failed to update oauth2PermissionGrant.");
 
-        logger.LogInformation("   - OAuth2 granted: client {ClientId} to resource {ResourceId} scopes [{Scopes}]",
+        logger.LogDebug("   - OAuth2 granted: client {ClientId} to resource {ResourceId} scopes [{Scopes}]",
             blueprintSpObjectId, mcpPlatformSpObjectId, string.Join(' ', scopes));
     }
 
diff --git a/src/Microsoft.Agents.A365.DevTools.Cli/Commands/SetupSubcommands/SetupHelpers.cs b/src/Microsoft.Agents.A365.DevTools.Cli/Commands/SetupSubcommands/SetupHelpers.cs
index 1bbffdb4..e20a01f7 100644
--- a/src/Microsoft.Agents.A365.DevTools.Cli/Commands/SetupSubcommands/SetupHelpers.cs
+++ b/src/Microsoft.Agents.A365.DevTools.Cli/Commands/SetupSubcommands/SetupHelpers.cs
@@ -260,7 +260,7 @@ public static async Task EnsureResourcePermissionsAsync(
         }
 
         // 2. Grant OAuth2 permissions (admin consent)
-        logger.LogInformation("   - OAuth2 grant: client {ClientId} to resource {ResourceId} scopes [{Scopes}]",
+        logger.LogDebug("   - OAuth2 grant: client {ClientId} to resource {ResourceId} scopes [{Scopes}]",
             blueprintSpObjectId, resourceSpObjectId, string.Join(' ', scopes));
 
         var response = await graph.CreateOrUpdateOauth2PermissionGrantAsync(