1. A method in a computing system including at least one processor for operating a virtual computing infrastructure for a plurality of tenants, comprising: for each of at least a subset of the plurality of tenants, receiving input specifying virtual computing resources from the virtual computing infrastructure to be used by users associated with the tenant; allocating the specified virtual computing resources to a virtual data center for the tenant that operates in isolation from other virtual data centers operating in the virtual computing infrastructure; receiving input from a privileged user associated with a distinguished tenant that specifies a plurality of users associated with the distinguished tenant; receiving input from at least one user associated with the distinguished tenant that specifies: a project to be established for the distinguished tenant that is associated with at least one of the specified plurality of users, and at least one of the following: a virtual data center to be used for the specified project, a virtual machine to be used for the specified project, a lab to be used for the specified project, and an asset to be to be used for the specified project; and establishing for use by users of the specified plurality of users the specified project, together with any specified data centers, virtual machines, labs, and assets.