Outlook uses the safe sender list for this. You need to add the email address(es) that you trust to this list and then it won't block them.
I'm unsure what your concern is, and I'm not an Exchange admin, but the docs say you can set all this up in Exchange Online Protection as discussed here. It appears there is a UI for that.