User Login

First-time sign-in walkthrough plus the most common things to check when something goes wrong.

What a Mosaic user experiences on their first sign-in, and what to check when sign-in or embedded content doesn't work.

First-time sign-in

1

Open Mosaic

The user opens https://mosaic.aidi.ai (or your tenant's custom Mosaic URL).

2

Sign in with Microsoft Entra

Mosaic redirects to Microsoft Entra ID. The user signs in with their work account - the same one they use for Power BI, Teams, and Microsoft 365. There is no separate Mosaic password.

3

Consent (first sign-in only)

If the tenant administrator already granted tenant-wide admin consent during Installation, the user is signed in immediately.

If not, the user sees a permission consent dialog. They can usually consent for themselves; some organisations require an admin to grant consent - see Azure App Registration → Tenant-wide admin consent.

4

Mosaic provisions their account

On the very first sign-in, Mosaic creates a personal workspace for the user, with a starter "Getting Started" page inside.

5

They land on the home page

The home page on first sign-in — personal workspace in the sidebar, chat ready, quick action pills, recently-accessed resources.

The user sees:

• The personal workspace in the left sidebar (and any shared workspaces they've already been invited to)

• The chat panel ready to take questions

• Quick action pills - Find reports, Write a DAX query, Build a page, Analyse trends

• Recently-accessed Power BI resources, once they've used a few

Troubleshooting

Sign-in fails with "AADSTS50105" or similar

Cause: Microsoft Entra is enforcing Assignment required on the Mosaic enterprise application, and the user (or their group) hasn't been assigned.

Fix: A Microsoft Entra administrator needs to either:

• Disable Assignment Required on the Mosaic enterprise app, or

• Add the user or their group under Microsoft Entra ID → Enterprise applications → Mosaic → Users and groups

See Azure App Registration → Restricting who can sign in.

"You don't have access" or empty workspaces list

Cause: The user's account exists but they're not a member of any shared workspace.

Fix: Sign-in itself succeeded - there's just nothing shared with them yet.

• Their personal workspace should appear in the sidebar regardless. If they don't see any workspace, contact [e-mail] so we can investigate.

• For shared content, the workspace's Owner needs to invite them by email — see Adding Members to a Workspace.

Embedded Power BI report shows "You don't have access to this report"

Cause: The user's Microsoft Entra account does not have access to the underlying Power BI workspace.

Fix: Grant the user access to the workspace in Power BI itself. Mosaic cannot bypass Power BI's own access model - every embed runs under the calling user's identity (OBO flow), and the user needs at least Viewer in the Power BI workspace. After Power BI access is granted, the embed loads on the next refresh.

Embedded report renders but visuals are blank or show "capacity exceeded"

Cause: The Power BI capacity hosting the workspace is overloaded, paused, or not provisioned.

Fix: Open the Power BI Admin Portal → Capacities and check the capacity status. Resume or scale up as needed. See your Microsoft Fabric / Power BI Premium / Embedded administrator. Mosaic does not include capacity - it sits on top of yours.

Voice input doesn't work

Cause: Browser microphone permission was denied, or the browser doesn't support the Web Speech API.

Fix:

• Check the browser's site permissions and re-grant microphone access for mosaic.aidi.ai

• Use a recent Chromium-based browser (Edge, Chrome) - Safari has partial support; Firefox does not currently expose SpeechRecognition

Where to go next

• Adding Members to a Workspace - bring teammates in

• Workspace Roles - what each role can do

• Working with Mosaic - coming soon (block editor, slash commands, embedding flow, voice, pinning AI artifacts)

• AI Agents - coming soon (built-in agents reference + custom agents on Mosaic Premium)

In the meantime, end users can explore by typing / inside any page or chat input to see available commands and resources.