It would be helpful to have a base permission set with out the Page (0) and Report (0) permission that has only the most basic required permissions for a user to get into BC. All the stock basic permission sets have the access to all pages and reports enabled. For any customer actually using permissions, the first thing we have to do is create a copy of the base permission set and then remove the Page 0 and report 0 permissions and then manually add the smaller set of pages and reports all users need.
This new base permission set would then allow more flexibility in adding permission set to add specific pages and reports based on the users roles and save time of not having to create the new base permission set.
Keep the existing permission sets but add a new one for the more restrictive base set.