It is impossible to keep track of which profiles have had permissions attached, as they are not shown in a logical order. Listing identities alphabetically on the permissions page would help. When 'add identity' is selected, all profiles continue ...