In marshmallow, apps that are built for marshmallow behave like iOS, in that they will install without asking for permissions. For old apps, they will behave like previous versions of Android and pop up a list at install time. Those permissions are granted at install. You can go into settings and disable granted permissions in both cases (with a warning that things can break for old apps)