DB2 and Replication Server both have permission requirements to access their data and system tables.
Replication Agent requires permission to read DB2 logs.
Replication Agent requires permission to log in to Replication Server as a Log Transfer Manager.
The LTMADMIN user ID creates Replication Agent system tables on DB2, and requires the permissions to:
Alter tables, for all primary DB2 tables marked for replication
Bind and add the log extract plan, for Replication Extract operation