Composite key (PersonId, UserId) was only defined via Fluent API; [PrimaryKey] makes the model class self-documenting.