That's quite late to answer, however, let's leave it here since I believe we forgot about TRIGGER privilege.
For MySQL: https://dev.mysql.com/doc/mysql-security-excerpt/8.0/en/privileges-provided.html#priv_trigger
For MariaDB: https://mariadb.com/docs/skysql-dbaas/ref/xpand/privileges/TRIGGER/
This privilege enables trigger operations. You must have this privilege for a table to create, drop, execute, or display triggers for that table.
GRANT TRIGGER
ON '<database>'.'<tablename/*>'
TO '<username>'@'<host/connection/ip/%>';