Default variables
The following default variables are available in
BlackBerry UEM
:Variable name |
Description |
Primary use |
|---|---|---|
%AccessKeyExpiry% |
Date and time that an access key expires |
Activation email messages |
%AccessKeys% |
Access keys that are automatically generated and used to activate BlackBerry
Dynamics apps |
Activation email messages |
%ActivationPassword% |
Activation password that is automatically generated or that you set for a user |
Activation email messages |
%ActivationPasswordExpiry% |
Date and time that an activation password expires |
Activation email messages |
%ActivationQRCode% |
QR Code for device activation |
Activation email messages |
%ActivationURL% |
Web address of the server that receives activation requests |
Activation email messages |
%ActivationUserName% |
Username for activation requests Equivalent to %UserEmailAddress% (if available for a user) or SRP ID\%UserName% |
Activation email messages |
%AdminPortalURL% |
Web address of BlackBerry UEM management console |
Administrator access email messages (not customizable) |
%AllEventVariables% |
A list of events (as configured in an event notification) that occurred in BlackBerry UEM |
Event notifications |
%ClientlessActivationURL% |
Web address of the server that receives activation requests from devices that are running Windows 10 |
Activation email messages |
%CommonName% |
Common Name (CN) attribute extracted from the distinguished name |
App configurations |
%ComplianceApplicationList% |
List of apps that violate compliance rules (non-assigned apps are installed and required apps are not installed) |
Compliance notifications |
%ComplianceEnforcementAction% |
Enforcement action that BlackBerry UEM performs if a device is non-compliant |
Compliance notifications |
%ComplianceEnforcementActionWithDescription% |
Enforcement action that BlackBerry UEM performs if a device is non-compliant, including a description of the enforcement action |
Compliance notifications |
%ComplianceRuleViolated% |
Compliance rule that a device violated |
Compliance notifications |
%DeviceIMEI% |
International Mobile Equipment Identity number of a device |
Profiles |
%DeviceModel% |
Model number of a device |
Compliance notifications |
%EmailAddressDomain% |
Domain of an email address |
App configurations |
%EmailAddressLocalPart% |
Local part of an email address (for example, "username" in username@example.com) |
App configurations |
%ExchangeAlloweddeviceId% |
Gatekeeping device ID |
App configurations |
%ICCIdentifier% |
Integrated Circuit Card Identifier |
App configurations |
%IMSIdentity% |
International Mobile Subscriber Identity |
App configurations |
%IOSUDIdentifier% |
iOS Unique Device Identifier |
App configurations |
%MEIdentifier% |
Mobile Equipment Identifier |
App configurations |
%OrganizationUnit% |
Organizational Unit (OU) attribute extracted from the distinguished name |
App configurations |
%PhoneNumber% |
Phone number of a device |
App configurations |
%RsaRootCaCertUrl% |
Web address of the RSA root CA certificate |
Activation email messages |
%SamAccountName% |
Username used to support earlier versions of Windows |
App configurations |
%SerialNumber% |
Serial number of a device |
Subject setting in SCEP profiles |
%SSLCertName% |
Common Name of the secure communication certificate |
Activation email messages |
%SSLCertSHA% |
Fingerprint of the secure communication certificate |
Activation email messages |
%UserDisplayName% |
Display name of a user |
Activation email messages, profiles |
%UserDisplayName_RDNValue% |
Display name of a user with special characters escaped according to the LDAP DN specification |
Subject setting in SCEP profiles |
%UserDistinguishedName% |
Directory user's distinguished name with special characters escaped according to the LDAP DN specification For a local user, equivalent to %UserName_RDNValue% |
Subject setting in SCEP profiles |
%UserDomain% |
Microsoft Active
Directory domain that a directory user belongs to |
Profiles |
%UserDomain_RDNValue% |
Microsoft Active
Directory domain that a directory user belongs to with special characters escaped according to the LDAP DN specification |
Subject setting in SCEP profiles |
%UserEmailAddress% |
Email address of a user |
Activation email messages, profiles |
%UserEmailAddress_RDNValue% |
Email address of a user with special characters escaped according to the LDAP DN specification |
Subject setting in SCEP profiles |
%UserFirstName% |
First name of a user |
App configurations |
%UserLastName% |
Last name of a user |
App configurations |
%UserLocale% |
Locale of a user (for example, en-US) |
App configurations |
%UserName% |
Username of a user |
Activation email messages, profiles |
%UserName_RDNValue% |
Username of a user with special characters escaped according to the LDAP DN specification |
Subject setting in SCEP profiles |
%UserPrincipalName% |
Directory user's principal name For a local user, equivalent to %UserEmailAddress% |
Profiles |
%UserPrincipalName_RDNValue% |
Directory user's principal name with special characters escaped according to the LDAP DN specification For a local user, equivalent to %UserEmailAddress_RDNValue% |
Subject setting in SCEP profiles |
%UserSelfServicePortalURL% |
Web address of BlackBerry UEM Self-Service |
Activation email messages |
%WIFIMacAddress% |
Wi-Fi MAC address |
App configurations |
If you configure high availability for the management consoles in the
BlackBerry UEM
domain in an on-premises environment, it is a best practice to update the %AdminPortalURL% and %UserSelfServicePortalURL% variables. For more information, see the Planning content.