If you set the first parameter in the SECURITY statement to 2 in the DBMOVER configuration member on z/OS, PowerExchange user credentials must pass z/OS security checking.
The user ID must have access to specific PowerExchange resources that are required to perform the PowerExchange function.
For example, users might need the following levels of access:
To read change data from the source, users need READ access to CAPX.REG.* resources profiles for the capture registrations.
To extract change data during PowerCenter CDC sessions, users need READ access to the data set defined in the DTLCAMAP DD statement of the PowerExchange Listener JCL to access extraction maps.
If the PowerExchange Listener uses a data set for the PowerExchange message log file specified in the DTLLOG DD or DTLLOG
nn
DD statement, users must have UPDATE access to that file.
To create, update, or delete data maps, users must have UPDATE access to the VSAM data set specified in the DATAMAP DD statement of the PowerExchange Listener JCL.