diff --git a/src/internal/controller/machineuser_controller.go b/src/internal/controller/machineuser_controller.go
index 25bbf80..f7c4bf8 100644
--- a/src/internal/controller/machineuser_controller.go
+++ b/src/internal/controller/machineuser_controller.go
@@ -100,6 +100,10 @@ func (wr *wrappedMachineUserReconciler) Reconcile(ctx context.Context, ztdClient
 			Name:      "machineUser",
 			Reconcile: wr.reconcileMachineUser,
 		},
+		{
+			Name:      "usergrants",
+			Reconcile: wr.reconcileUserGrants,
+		},
 		{
 			Name:      "pat",
 			Reconcile: wr.reconcilePAT,
@@ -108,10 +112,6 @@ func (wr *wrappedMachineUserReconciler) Reconcile(ctx context.Context, ztdClient
 			Name:      "jwt",
 			Reconcile: wr.reconcileJWT,
 		},
-		{
-			Name:      "usergrants",
-			Reconcile: wr.reconcileUserGrants,
-		},
 	}
 	for _, p := range phases {
 		err := p.Reconcile(ctx, ztdClient)