The ID in question, 468496, is failing IDB2's security check. The addition of the following line in the Security file resolves this.
Under the line: (TYPE=USER,$-Z9999999,*,SYSADM), /*EVERYONE IS SYSADM
add: (TYPE=USER,468496,*,SYSADM) /*CE-APM ID IS SYSADM
Once the line has been added to the IDB2 Security file, refresh it by either issuing the 'SECURITY' command in IDB2 or by bouncing the IDB2 Data Collector.