It is impossible to keep track of which profiles have had permissions attached, as they are not shown in a logical order. Listing identities alphabetically on the permissions page would help.

When 'add identity' is selected, all profiles continue to be listed, including those that have already had permissions set. Only showing profiles that have not already been selected would help here - in tyhe same way security options are set in Student Manager.