Couldn't be this association HostgroupRole computed from DeploymentRoleHostgroup?