Default variables
The following default variables are available in
BlackBerry UEM
:Variable name | Description | Primary use |
|---|---|---|
%AccessKeyExpiry% | Date and time that an access key expires | Activation email messages |
%AccessKeys% | Access keys that are automatically generated and used to activate BlackBerry
Dynamics apps | Activation email messages |
%ActivationPassword% | Activation password that is automatically generated or that you set for a user | Activation email messages |
%ActivationPasswordExpiry% | Date and time that an activation password expires | Activation email messages |
%ActivationQRCode% | QR Code for device activation | Activation email messages |
%ActivationURL% | Web address of the server that receives activation requests | Activation email messages |
%ActivationUserName% | Username for activation requests Equivalent to %UserEmailAddress% (if available for a user) or SRP ID\%UserName% | Activation email messages |
%AdminPortalURL% | Web address of BlackBerry UEM management console | Administrator access email messages (not customizable) |
%AllEventVariables% | A list of events (as configured in an event notification) that occurred in BlackBerry UEM | Event notifications |
%ClientlessActivationURL% | Web address of the server that receives activation requests from devices that are running Windows 10 | Activation email messages |
%CommonName% | Common Name (CN) attribute extracted from the distinguished name | App configurations |
%ComplianceApplicationList% | List of apps that violate compliance rules (non-assigned apps are installed and required apps are not installed) | Compliance notifications |
%ComplianceEnforcementAction% | Enforcement action that BlackBerry UEM performs if a device is non-compliant | Compliance notifications |
%ComplianceEnforcementActionWithDescription% | Enforcement action that BlackBerry UEM performs if a device is non-compliant, including a description of the enforcement action | Compliance notifications |
%ComplianceRuleViolated% | Compliance rule that a device violated | Compliance notifications |
%DeviceIMEI% | International Mobile Equipment Identity number of a device | Profiles |
%DeviceModel% | Model number of a device | Compliance notifications |
%EmailAddressDomain% | Domain of an email address | App configurations |
%EmailAddressLocalPart% | Local part of an email address (for example, "username" in username@example.com) | App configurations |
%ExchangeAlloweddeviceId% | Gatekeeping device ID | App configurations |
%ICCIdentifier% | Integrated Circuit Card Identifier | App configurations |
%IMSIdentity% | International Mobile Subscriber Identity | App configurations |
%IOSUDIdentifier% | iOS Unique Device Identifier | App configurations |
%MEIdentifier% | Mobile Equipment Identifier | App configurations |
%OrganizationUnit% | Organizational Unit (OU) attribute extracted from the distinguished name | App configurations |
%PhoneNumber% | Phone number of a device | App configurations |
%RsaRootCaCertUrl% | Web address of the RSA root CA certificate | Activation email messages |
%SamAccountName% | Username used to support earlier versions of Windows | App configurations |
%SerialNumber% | Serial number of a device | Subject setting in SCEP profiles |
%SSLCertName% | Common Name of the secure communication certificate | Activation email messages |
%SSLCertSHA% | Fingerprint of the secure communication certificate | Activation email messages |
%UserDisplayName% | Display name of a user | Activation email messages, profiles |
%UserDisplayName_RDNValue% | Display name of a user with special characters escaped according to the LDAP DN specification | Subject setting in SCEP profiles |
%UserDistinguishedName% | Directory user's distinguished name with special characters escaped according to the LDAP DN specification For a local user, equivalent to %UserName_RDNValue% | Subject setting in SCEP profiles |
%UserDomain% | Microsoft Active
Directory domain that a directory user belongs to | Profiles |
%UserDomain_RDNValue% | Microsoft Active
Directory domain that a directory user belongs to with special characters escaped according to the LDAP DN specification | Subject setting in SCEP profiles |
%UserEmailAddress% | Email address of a user | Activation email messages, profiles |
%UserEmailAddress_RDNValue% | Email address of a user with special characters escaped according to the LDAP DN specification | Subject setting in SCEP profiles |
%UserFirstName% | First name of a user | App configurations |
%UserLastName% | Last name of a user | App configurations |
%UserLocale% | Locale of a user (for example, en-US) | App configurations |
%UserName% | Username of a user | Activation email messages, profiles |
%UserName_RDNValue% | Username of a user with special characters escaped according to the LDAP DN specification | Subject setting in SCEP profiles |
%UserPrincipalName% | Directory user's principal name For a local user, equivalent to %UserEmailAddress% | Profiles |
%UserPrincipalName_RDNValue% | Directory user's principal name with special characters escaped according to the LDAP DN specification For a local user, equivalent to %UserEmailAddress_RDNValue% | Subject setting in SCEP profiles |
%UserSelfServicePortalURL% | Web address of BlackBerry UEM Self-Service | Activation email messages |
%WIFIMacAddress% | Wi-Fi MAC address | App configurations |
If you configure high availability for the management consoles in the
BlackBerry UEM
domain in an on-premises environment, it is a best practice to update the %AdminPortalURL% and %UserSelfServicePortalURL% variables. For more information, see the Planning content.