Yes, I configured a "Source Remote". And I figured out what was wrong:
It's been my mistake, I misunderstood the roles named "Remote..." and used them on pbs01 for the sync user. But of course I need to use at least the role "DatastoreReader" for the user on pbs01 to allow pbs02 to pull data...