1. A method, comprising: receiving, by a virtual machine (VM) executed by a processing device, identification of resource-usage groups that each define resource constraints to apply to applications; establishing a resource control policy on the VM for each of the identified resource-usage groups, the resource control policy to enforce the resource constraints of its associated resource-usage group; for each established resource control policy, configuring resource control tools of the VM to implement the resource control policy; receiving, by the VM, a request to initialize an application on the VM, the request comprising identifying information about the application; identifying, by the VM in view of the identifying information, a resource-usage group of the resource-usage groups that the application is assigned; applying, by the resource control tools to the application, the resource control policy of the identified resource-usage group that the application is assigned; and executing the application with the defined resource constraints, which correspond to the identified resource-usage group that the application is assigned, applied to the VM, the application executed on the VM with other applications having different owners than an owner of the application.