Dynamic Variables

Dynamic variables in MDM eliminate the need to create separate policies for individual users by automatically fetching enrollment and inventory details at the time of policy application. Administrators can use placeholders such as %email%, %username%, %devicename%, and %serialnumber% within user-specific configurations — including E-mail, VPN, and custom profiles — to make a single policy work across many users. This page lists all supported dynamic variables along with their descriptions and source data.

For user-specific policies such as E-mail, VPN, and custom configurations, creating separate policies for individual users can become a tedious task for your IT administrator. Rather than creating and configuring policies for every single user, the administrator can utilize dynamic variables.

Dynamic variables automatically fetch the requisite information from the enrollment details. The dynamic variables supported by MDM are listed below along with their descriptions.

List of Variables

Variables	Description
%apn_password%	Fetches the APN Password from the inventory device details.
%apn_username%	Fetches the APN User Name from the inventory device details.
%asset_owner%	Fetches the asset owner's name from the inventory device details.
%asset_tag%	Fetches the asset tag from the inventory device details.
%bluetooth_mac%	Fetches the Bluetooth address mapped to the device.
%devicename%	Fetches the name of the device from the enrollment details.
%devicenumber%	Adds a sequential number to device names (e.g., "iPhone 1", "iPhone 2") during enrollment for unique identification.
%displayname%	Fetches the display name from the enrollment details.
%domainname%	Fetches the domain name from the enrollment details.
%easid%	Fetches the EAS device identifier from the enrollment details.
%email%	Fetches the E-mail ID of the user from the enrollment details.
%ethernet_mac%	Fetches the ethernet MAC address mapped to the device.
%firstname%	Fetches the first name of the user mapped to the device.
%group%	Fetches the names of the groups to which the device has been added.
%imei%	Fetches the IMEI number from the enrollment details.
%lastname%	Fetches the last name of the user mapped to the device.
%middlename%	Fetches the middle name of the user mapped to the device.
%office%	Fetches the office/branch/location details from the inventory device details.
%organization_name%	Fetches the organization name from the enrollment details.
%phone_number_primary%	Fetches the primary phone number (SIM Slot 1) present on the device.
%phone_number_secondary%	Fetches the secondary phone number (SIM Slot 2) present on the device.
%serialnumber%	Fetches the serial number of the device from the enrollment details.
%udid%	Fetches the UDID of the device from the enrollment details.
%upn%	Fetches the user principal name from the enrollment details.
%user.phone_number%	Fetches the user's phone number assigned from MDM mapped to the device.
%username%	Fetches the user name from the enrollment details.
%wifi_mac%	Fetches the Wi-Fi MAC address mapped to the device.
%on_premises_security_identifier%	Fetches the objectsid (user security identifier) from the directory details.

Frequently Asked Questions

1. What happens if a dynamic variable has no matching data for a device?

If the enrollment or inventory details required by a dynamic variable aren't available for a device, the variable is left unresolved when the profile is applied, so verify the relevant device/user details are populated before relying on that variable.

2. Which dynamic variable requires Directory integration?

%on_premises_security_identifier% fetches the objectsid (user security identifier) from the directory details, so it requires your organization's Directory service to be integrated with MDM.

3. What's the difference between %username% and %displayname%?

%username% fetches the user name from the enrollment details, while %displayname% fetches the display name from the enrollment details; the two can differ depending on how your directory or enrollment record is configured.

Jump To