Check out the system catalog views (SYSCAT.*). You might be interested in SYSCAT.TABAUTH in particular.
SYSADM authority is usually assigned to a group, so you can check what group it is:
db2 get dbm cfg | grep SYSADM
then see who is in that group:
lsgroup whatevergroupitwas