Payload variables

In any payload field, you can use variables to create information that’s dynamically resolved by Profile Manager when the configuration profile is sent to managed devices or assigned to a user. This lets you create profiles that can be used across a variety of situations and devices.

The substitution variables you can specify are described below. You can combine the variables with static text, such as “”.

User information variables

These variables are resolved using information from the user’s directory (Open Directory) record.




The user’s full name—for example, Karl Bohn


The user’s first name—for example, Karl


The user’s last name—for example, Bohn


The user’s email address


The user’s job title


The user’s mobile telephone number


The user’s short name—for example, kbohn


The user’s guid—for example, 237

Device information variables

These variables are resolved using information from the device record in Profile Manager.




The ICCID from the device’s SIM card, if present


The common version number of the device’s OS, such as “10.9”


The device’s serial number


The device’s product name, such as “MacBook”


An alphanumeric representation of the OS version installed on the device, such as “11J66”


The device’s International Mobile Equipment Identity (IMEI), if present


The MAC address of the device’s Wi-Fi interface

802.1X network variables

On Mac computers, you can use the following variables in the 802.1X user name fields. These variables are resolved on the device during installation of the configuration profile. You can combine these variables with static text, such as Mac.%HardwareUUID%, to create a compound user name.




Active Directory computer ID


Active Directory domain


Active Directory forest name


Active Directory GUID


Active Directory DNS Name


Active Directory Kerberos ID


The computer’s name, as set in System Preferences > Sharing


The computer’s unique identifier


The computer’s DNS name, such as


The computer’s local network name, such as Mac1.local


The computer’s default (en0) MAC address


The computer’s serial number