User management does not block unapproved users

[gorbulan]

Qnap:
TS-453 Pro
4.2.0 build 20160130
Connected over Gigabit Ethernet - not sure about port trunking
Disks are RAID10, all four slots filled with 3TB WD Red drives

Clients:
Mac laptops running Mac OS 10.9-12
PC's running Windows 7/8.1/10 (mostly Pro editions)

Most clients are connected to the network via Gigabit, but some go through 802.11n.
______

I am trying to configure the myQNAPcloud settings so only approved users can login to the web interface (myNASname.myqnapcloud.com). Authentication works for any local user on the Qnap through the domain, myNASname.myqnapcloud.com. This is unacceptable for security, so I want to restrict which accounts can login.

I opened the settings for myQNAPcloud and went to Cloud Portal>Access Control. There I set up an account for access to the Qnap. However, I can still login through myQnapCloud with any account. The VPN client is restricted, it only allows users listed in Access Control. The myQnapCloud website portion is still unrestricted. Any account can login to myNASname.myqnapcloud.com.