You need the UPDATE privilege only for columns referenced in an UPDATE that are actually updated.
dev.mysql.com