1. A computer-implemented method, comprising: receiving, by a virtual machine (VM) executing on a computing device, identification of one or more resource-usage groups, each of the one or more resource-usage groups defining resource constraints to apply to applications having a type of the resource-usage group; establishing a resource control policy on the VM for each of the identified one or more resource-usage groups, the resource control policy to enforce the resource constraints of its associated resource-usage group; for each established resource control policy, configuring a plurality of resource control tools of the VM to implement the resource control policy; identifying, by the VM, a resource-usage group of an application to be created on the VM; applying, by the one or more resource control tools to the application, the resource control policy of the identified resource-usage group of the application; and executing the application with the defined resource constraints on the VM, the application co-existing on the VM with other applications having different owners than an owner of the application.