When accessing a PowerApp from Dynamics 365 A url like this is used:
https://web.powerapps.com/apps/<GUID>?source=businessAppDiscovery
My app is loaded and the first time I'm getting:

Note that the Allow button is disabled ( So I haven't allowed anything)
then I copy the same url (https://web.powerapps.com/apps/<GUID>?source=businessAppDiscovery) again in my browser and the app just starts.
Is this the expected behaviour?