The tunnel service should be enabled only on Author. Looks like you are trying to access Members console from a publish instance (port 4503 in screenshot). Please try accessing it from Author, it would use tunnel service to fetch users from Publish instance and allow you to manage site users/groups....