As with NT/ADSI cmd actions, the environment variables are exported and available to actions. These comprise any one of the schema-mapped attributes that have values on the user (defined in the resource schema map in the Waveset User Attribute column), prefixed by WSUSER_.
Multi-valued attributes consist of a pipe-separated list, as in:
WSUSER_groups=staff|admin|users