Variables
You can use variables in certain configuration fields to represent values specific to a given user. Any field that supports variables displays a list of supported variables if you type $ in the field. This section contains the following topics:
Supported user account variables
User Variables
Variable key |
Value description |
---|---|
${department} | department attribute (requires Azure Active Directory) |
${edipi} | No Description |
${managedAppleId} | User's Managed Apple ID |
${sAMAccountName} | sAMAccountName attribute (requires Active Directory) |
${userCN} | Common Name (CN) attribute extracted from the distinguished name (requires LDAP) |
${userDisplayName} | Display name |
${userDN} | Distinguished Name (requires LDAP) |
${userEmailAddressDomain} | The domain part of the email address (part after '@') |
${userEmailAddressLocalPart}> | The local part of the email address (part before '@') |
${userEmailAddress} |
Email address |
${userFirstName} | First name |
${userLastName} | Last name |
${userLocale} | Locale |
${userOU} | Organizational Unit (OU) attribute extracted from the distinguished name (requires LDAP) |
${userREALM} | Kerberos Realm information (requires Active Directory) |
${userUIDDomain} | The domain part of the login ID (the part after '@') |
${userUIDLocalPart} | The local part of the login ID (the part before '@') |
${userUID} | Login ID (email address format) |
${userUPN} | userPrincipalName attribute (requires Active Directory) |
Supported device variables
Use device variables to specify information about a mobile device.
Device Variables
Variable key |
Value description |
---|---|
${clientLastCheckin} | Date client last checked-in (most recent checkin - either MDM or Client) |
${deviceAltSN} | Alternative Serial Number |
${deviceClientDeviceIdentifier} | Identifier used by the client application |
${deviceGUID} | Globally unique device identifier |
${deviceIccIdentifier} | No Description |
${deviceIMEI2} | IMEI2 |
${deviceIMEI} | IMEI |
${deviceIMSI} | IMSI |
${deviceLastCheckin} | Date device last checked-in (most recent checkin - either MDM or Client) |
${deviceMdmChannelId} | Internal device identifier |
${deviceMdmDeviceIdentifier} | Identifier used for MDM |
${deviceMEIdentifier} | No Description |
${deviceModel} | Model |
${deviceName} | Device name |
${devicePhoneNumber} | Device phone number |
${devicePK} | Cluster unique device identifier |
${deviceSN} | Serial Number |
${deviceUDID} | iOS UDID |
${deviceWifiMacAddress} | Wi-Fi MAC Address |
Email template variables
Variable key |
Value description |
---|---|
${policyMessageContent} | No Description |
${policyMessageTitle} | No Description |
Time stamp variables
Variable key |
Value description |
---|---|
${timestampMS} | Current timestamp (milliseconds since the epoch) |
Policy template variables
Variable key |
Value description |
---|---|
${nameOfPolicy} | Policy name violated |
${nextAction} | Next Tiered Compliance Action (different than wait and retire) to be taken after send message |
${nonComplianceTime} | Count of days device has been in non-compliant state |
${policyViolationFirstTime} | Time stamp when policy violation was first triggered (UTC DD-MM-YYYY format) |
${ruleConditions} | Rule definition (query string the way it appears now) |
Related topics: