TPXBATCH Jobs need UPDATE Authority for ADMIN1, ADMIN2 and MAIL files even if they only read these files.
A user submitting a TPXBATCH job also needs to have UPDATE Authority granted by the Security System also for TPXBATCH jobs doing only a REPORT or EXTRACT, no UPDATE.
The reason for this is that TPX uses its OPEN-routines from the online part also for TPXBATCH. These routines issue an OPEN for UPDATE on ADMIN1/2 and MAIL in general.