In powershell I use LDAP sometimes instead of get-aduser so that I don't need to add the module. I just imagine that LDAP might be easier for UEM as well plus add the ability to query other directories.
Maybe something like this:
[Flex#LDAP://CN=<%username%>,OU=Users,DC=Domain,DC=Com#Title]