diff --git a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
index bebf16cadbac..082f11239ede 100644
--- a/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
+++ b/hbase-server/src/main/java/org/apache/hadoop/hbase/security/access/AccessController.java
@@ -2072,7 +2072,7 @@ public Void run() throws Exception {
 
         if (AUDITLOG.isTraceEnabled()) {
           // audit log should store permission changes in addition to auth results
-          AUDITLOG.trace("Granted permission " + perm.toString());
+          AUDITLOG.trace("User {} granted permission {}", caller, perm);
         }
       } else {
         throw new CoprocessorException(AccessController.class, "This method "
@@ -2129,7 +2129,7 @@ public Void run() throws Exception {
 
         if (AUDITLOG.isTraceEnabled()) {
           // audit log should record all permission changes
-          AUDITLOG.trace("Revoked permission " + perm.toString());
+          AUDITLOG.trace("User {} revoked permission {}", caller, perm);
         }
       } else {
         throw new CoprocessorException(AccessController.class, "This method "