# User Login

What a Mosaic user experiences on their first sign-in, and what to check when sign-in or embedded content doesn't work.

## First-time sign-in

{% stepper %}
{% step %}

#### Open Mosaic

The user opens `https://mosaic.aidi.ai` (or your tenant's custom Mosaic URL).
{% endstep %}

{% step %}

#### Sign in with Microsoft Entra

Mosaic redirects to Microsoft Entra ID. The user signs in with their work account - the same one they use for Power BI, Teams, and Microsoft 365. There is no separate Mosaic password.
{% endstep %}

{% step %}

#### Consent (first sign-in only)

If the tenant administrator already granted tenant-wide admin consent during [Installation](/mosaic/get-started/installation-steps.md), the user is signed in immediately.

If not, the user sees a permission consent dialog. They can usually consent for themselves; some organisations require an admin to grant consent - see [Azure App Registration → Tenant-wide admin consent](/mosaic/get-started/powerbi-configuration/azure-app-registration.md).
{% endstep %}

{% step %}

#### Mosaic provisions their account

On the very first sign-in, Mosaic creates a personal workspace for the user, with a starter "Getting Started" page inside.
{% endstep %}

{% step %}

#### They land on the home page

<figure><img src="/files/prsOZ3YNqvHrW3kTBmkB" alt=""><figcaption><p>The home page on first sign-in — personal workspace in the sidebar, chat ready, quick action pills, recently-accessed resources.</p></figcaption></figure>

The user sees:

* The personal workspace in the left sidebar (and any shared workspaces they've already been invited to)
* The chat panel ready to take questions
* Quick action pills - *Find reports*, *Write a DAX query*, *Build a page*, *Analyse trends*
* Recently-accessed Power BI resources, once they've used a few
  {% endstep %}
  {% endstepper %}

## Troubleshooting

### Sign-in fails with "AADSTS50105" or similar

**Cause**: Microsoft Entra is enforcing *Assignment required* on the Mosaic enterprise application, and the user (or their group) hasn't been assigned.

**Fix**: A Microsoft Entra administrator needs to either:

* Disable Assignment Required on the Mosaic enterprise app, or
* Add the user or their group under **Microsoft Entra ID → Enterprise applications → Mosaic → Users and groups**

See [Azure App Registration → Restricting who can sign in](/mosaic/get-started/powerbi-configuration/azure-app-registration.md).

### "You don't have access" or empty workspaces list

**Cause**: The user's account exists but they're not a member of any shared workspace.

**Fix**: Sign-in itself succeeded - there's just nothing shared with them yet.

* Their personal workspace should appear in the sidebar regardless. If they don't see *any* workspace, contact `info@vizlake.com` so we can investigate.
* For shared content, the workspace's Owner needs to invite them by email — see [Adding Members to a Workspace](/mosaic/user-access/adding-members.md).

### Embedded Power BI report shows "You don't have access to this report"

**Cause**: The user's Microsoft Entra account does not have access to the underlying Power BI workspace.

**Fix**: Grant the user access to the workspace in Power BI itself. Mosaic cannot bypass Power BI's own access model - every embed runs under the calling user's identity (OBO flow), and the user needs at least **Viewer** in the Power BI workspace. After Power BI access is granted, the embed loads on the next refresh.

### Embedded report renders but visuals are blank or show "capacity exceeded"

**Cause**: The Power BI capacity hosting the workspace is overloaded, paused, or not provisioned.

**Fix**: Open the **Power BI Admin Portal → Capacities** and check the capacity status. Resume or scale up as needed. See your Microsoft Fabric / Power BI Premium / Embedded administrator. Mosaic does not include capacity - it sits on top of yours.

### Voice input doesn't work

**Cause**: Browser microphone permission was denied, or the browser doesn't support the Web Speech API.

**Fix**:

* Check the browser's site permissions and re-grant microphone access for `mosaic.aidi.ai`
* Use a recent Chromium-based browser (Edge, Chrome) - Safari has partial support; Firefox does not currently expose `SpeechRecognition`

## Where to go next

* [Adding Members to a Workspace](/mosaic/user-access/adding-members.md) - bring teammates in
* [Workspace Roles](/mosaic/user-access/workspace-roles.md) - what each role can do
* *Working with Mosaic* - coming soon (block editor, slash commands, embedding flow, voice, pinning AI artifacts)
* *AI Agents* - coming soon (built-in agents reference + custom agents on Mosaic Premium)

In the meantime, end users can explore by typing `/` inside any page or chat input to see available commands and resources.


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.aidi.ai/mosaic/user-access/user-login.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.