GRANT EXECUTE on PLAN 
db2_plan_name to 
user_id              [for the DB2 plan]

GRANT SELECT on SYSIBM.SYSTABLES to 
user_id                 [for the DB2 catalog]
GRANT SELECT on SYSIBM.SYSCOLUMNS to 
user_id

GRANT SELECT on 
creator.
table to 
user_id                    [for each DB2 source table]
GRANT INSERT on 
creator.
table to 
user_id                    [for each DB2 target table]

db2_plan_name
is the DB2 plan name that is specified in the DB2PLAN statement in the DBMOVER configuration member.
user_id
is the z/OS user ID or PowerExchange Listener user ID that is associated with the user request to access DB2 source or target data by means of the PowerExchange Listener.
creator
.
table_name
identifies a specific DB2 source or target table that is involved in bulk data movement.