Hi it seems, that when the User gets a Spam report, the whitelist Option is only available for Users know by Astaro. And only for the main mail.
Open second time. see
https://community.sophos.com/products/unified-threat-management/astaroorg/f/98/t/68005