usergroup association now uses 4-part PK with additional indexes, to allow lookups based on various partial keys