If a patient record is showing 'not allowed' in place of the patient's email address, then they have not consented to being contacted by email.
To indicate that they have consented, go to the patient's contact options and allow general contact and any further contact types by email:
To change the default contact options for new patients, go to the Configuration page, click the Consent tab and set the default contact options: