launch agent rsync Operation not permitted

I have a user agent to schedule backups. Here it calls a shell script witch runs rsync:

Code Block
<key>Program</key>
<string>/Users/x/backup.sh</string>

And here it runs the same shell script as an automator app:
Code Block
<key>ProgramArguments</key>
<array>
<string>/usr/bin/open</string>
<string>/Users/x/backup.app</string>
</array>

The app gets executed without errors. The shellscript fails:
Code Block
rsync: opendir "folder" failed: Operation not permitted


How do I get the shellscript running? What causes the error?