I think everyone else is on vacation today...
db2fenc1 - this userid is used to run stored procedures and such separate from the instance, when you create them as "fenced". Otherwise, they are run as the instance owner, which in some cases can lead to undesirable results (ie memory issues, stack overflows, etc that effect the instance)
dasusr1 - used for the administration server, if you plan on administering the database remotely from the Control Center GUI.