A method includes, for components of an application, identifying a plurality of groups including a first group and a second group, The method also includes nesting the first group into the second group to create a nested group, based at least on a level of the first group not exceeding a level of the second group. The method includes deploying the application by placing the components of the nested group within a network in accordance with a restriction of the nested group. The components include at least one virtual machine.