> For the complete documentation index, see [llms.txt](https://docs.aidi.ai/llms.txt). Markdown versions of documentation pages are available by appending `.md` to page URLs; this page is available as [Markdown](https://docs.aidi.ai/mosaic/user-access/user-login.md).

# User Login

First-time sign-in walkthrough plus the most common things to check when something goes wrong.

What a Mosaic user experiences on their first sign-in, and what to check when sign-in or embedded content doesn't work.

## First-time sign-in

{% stepper %}
{% step %}

#### Open Mosaic

The user opens `https://mosaic.aidi.ai` (or your tenant's custom Mosaic URL).
{% endstep %}

{% step %}

#### Sign in with Microsoft Entra

Mosaic redirects to Microsoft Entra ID. The user signs in with their work account - the same one they use for Power BI, Teams, and Microsoft 365. There is no separate Mosaic password.
{% endstep %}

{% step %}

#### Consent (first sign-in only)

If the tenant administrator already granted tenant-wide admin consent during [Installation](/mosaic/get-started/installation-steps.md), the user is signed in immediately.

If not, the user sees a permission consent dialog. They can usually consent for themselves; some organisations require an admin to grant consent - see [Azure App Registration → Tenant-wide admin consent](/mosaic/get-started/powerbi-configuration/azure-app-registration.md).
{% endstep %}

{% step %}

#### Mosaic provisions their account

On the very first sign-in, Mosaic creates a personal workspace for the user, with a starter "Getting Started" page inside.
{% endstep %}

{% step %}

#### They land on the home page

<figure><img src="https://1145421189-files.gitbook.io/~/files/v0/b/gitbook-x-prod.appspot.com/o/spaces%2FpenTjiXHJSQbAhF2yxzq%2Fuploads%2Fgit-blob-6f814318ed8a712d2d3580167a6e53402a6e0390%2Fmosaic-home.png?alt=media" alt=""><figcaption><p>The home page on first sign-in — personal workspace in the sidebar, chat ready, quick action pills, recently-accessed resources.</p></figcaption></figure>

The user sees:

* The personal workspace in the left sidebar (and any shared workspaces they've already been invited to)
* The chat panel ready to take questions
* Quick action pills - *Find reports*, *Write a DAX query*, *Build a page*, *Analyse trends*
* Recently-accessed Power BI resources, once they've used a few
  {% endstep %}
  {% endstepper %}

## Troubleshooting

### Sign-in fails with "AADSTS50105" or similar

**Cause**: Microsoft Entra is enforcing *Assignment required* on the Mosaic enterprise application, and the user (or their group) hasn't been assigned.

**Fix**: A Microsoft Entra administrator needs to either:

* Disable Assignment Required on the Mosaic enterprise app, or
* Add the user or their group under **Microsoft Entra ID → Enterprise applications → Mosaic → Users and groups**

See [Azure App Registration → Restricting who can sign in](/mosaic/get-started/powerbi-configuration/azure-app-registration.md).

### "You don't have access" or empty workspaces list

**Cause**: The user's account exists but they're not a member of any shared workspace.

**Fix**: Sign-in itself succeeded - there's just nothing shared with them yet.

* Their personal workspace should appear in the sidebar regardless. If they don't see *any* workspace, contact `info@vizlake.com` so we can investigate.
* For shared content, the workspace's Owner needs to invite them by email — see [Adding Members to a Workspace](/mosaic/user-access/adding-members.md).

### Embedded Power BI report shows "You don't have access to this report"

**Cause**: The user's Microsoft Entra account does not have access to the underlying Power BI workspace.

**Fix**: Grant the user access to the workspace in Power BI itself. Mosaic cannot bypass Power BI's own access model - every embed runs under the calling user's identity (OBO flow), and the user needs at least **Viewer** in the Power BI workspace. After Power BI access is granted, the embed loads on the next refresh.

### Embedded report renders but visuals are blank or show "capacity exceeded"

**Cause**: The Power BI capacity hosting the workspace is overloaded, paused, or not provisioned.

**Fix**: Open the **Power BI Admin Portal → Capacities** and check the capacity status. Resume or scale up as needed. See your Microsoft Fabric / Power BI Premium / Embedded administrator. Mosaic does not include capacity - it sits on top of yours.

### Voice input doesn't work

**Cause**: Browser microphone permission was denied, or the browser doesn't support the Web Speech API.

**Fix**:

* Check the browser's site permissions and re-grant microphone access for `mosaic.aidi.ai`
* Use a recent Chromium-based browser (Edge, Chrome) - Safari has partial support; Firefox does not currently expose `SpeechRecognition`

## Where to go next

* [Adding Members to a Workspace](/mosaic/user-access/adding-members.md) - bring teammates in
* [Workspace Roles](/mosaic/user-access/workspace-roles.md) - what each role can do
* *Working with Mosaic* - coming soon (block editor, slash commands, embedding flow, voice, pinning AI artifacts)
* *AI Agents* - coming soon (built-in agents reference + custom agents on Mosaic Premium)

In the meantime, end users can explore by typing `/` inside any page or chat input to see available commands and resources.