Users - Inviting, adding, changing and passwords

[muzicman0 84]

I recently had to rebuild my Emby Server from scratch, which meant adding my users again.  luckily I don't have that many!

There were some things that I find either confusing, or even worse, a security hole.  But perhaps I did it wrong???

The Emby website shows (here) that there should be a feature to invite someone using their Emby Connect account (all my users have a connect account). Specifically, this image is shown in the docs, but I never saw it at all.  ever.  

 <--Not in the add user process

This was not present when I added the user.  I had to enter all of their information manually, and then add their Emby account. 

This wouldn't be a big deal, except after I added them, there was no password associated with their account. So I was able to access my server, simply type in their user name, and I had access to the server under their account.  There was no warning that this would happen at all.

The only way I could get around this was to add a password to their account and tell them they would have to change it.  I don't know if that will automatically happen when they accept the Connect invitation that was sent when I added them or not.  But either way, this is not a good process.

So...did I do this completely wrong???

Edited June 23, 2024 by muzicman0

[bakes82 167]

A lot of the their help guides seem dated.  You added users the way I would do it, new accounts then add emby connect email.

[muzicman0 84]

Thanks.  The problem is that then there is no password.  Unless you add one for them (which I did), but that makes them jump through hoops to change their password.  Seems a bit clunky.

When they accept the Emby Connect email invite, will their existing emby connect password work to get them into my server, or will they need to change it?

[ebr 16185]

2 hours ago, muzicman0 said:

When they accept the Emby Connect email invite, will their existing emby connect password work to get them into my server,

Yes.

[ebr 16185]

3 hours ago, muzicman0 said:

I recently had to rebuild my Emby Server from scratch, which meant adding my users again.  luckily I don't have that many!

There were some things that I find either confusing, or even worse, a security hole.  But perhaps I did it wrong???

The Emby website shows (here) that there should be a feature to invite someone using their Emby Connect account (all my users have a connect account). Specifically, this image is shown in the docs, but I never saw it at all.  ever.  

 <--Not in the add user process

This was not present when I added the user.  I had to enter all of their information manually, and then add their Emby account. 

This wouldn't be a big deal, except after I added them, there was no password associated with their account. So I was able to access my server, simply type in their user name, and I had access to the server under their account.  There was no warning that this would happen at all.

The only way I could get around this was to add a password to their account and tell them they would have to change it.  I don't know if that will automatically happen when they accept the Connect invitation that was sent when I added them or not.  But either way, this is not a good process.

So...did I do this completely wrong???

If you read the text above that image I think it is just that it is the wrong image.  We need to fix that.  @sa2000

[sa2000 674]

The images have been updated on the support article for Users https://emby.media/support/articles/Users.html