you need (at least one of) the RELOAD privilege(s) for this operation (1227)

grant RELOAD, LOCK TABLES, PROCESS, REPLICATION CLIENT on *.* to 'zbx_backup'@'localhost' identified by 'your-password';