I seem to be able to reproduce the issue, looks like something broke in the EAC. As a workaround, you can perform the changes via PowerShell:
Set-UnifiedGroup groupname -AcceptMessagesOnlyFromSendersOrMembers @{add="user@domain.com"}
I will ping few folks to take a look at the portal issue...