1. A method in a computing system including at least one processor for operating a virtual computing infrastructure for a plurality of tenants, comprising: for each of at least a subset of the plurality of tenants, receiving input specifying virtual computing resources from the virtual computing infrastructure to be used by users associated with the tenant; and allocating the specified virtual computing resources to a virtual data center for the tenant that operates in isolation from other virtual data centers operating in the virtual machine infrastructure.