To block or allow email addresses at the tenant level go to


Security admin centre 


https://security.microsoft.com/homepage


Policies & Rules>Threat Policies>Anti-Spam>Anti-Spam Inbound Policy



Can either allow\block particular senders or domains.