A method implemented by a computer processor in communication with resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) of a distributed system, the method comprising: identifying high-availability jobs (122, 122a) and low-availability jobs (122, 122b) that demand a usage of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) of the distributed system, wherein the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) comprise storage resources and non-storage resources; determining a first quota, Q1, of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available to low-availability jobs (122, 122b) as a quantity of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available during a first operation of the distributed system, wherein during the first operation, the distributed system is not undergoing maintenance or failure; determining a second quota, Q2, of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available to high-availability jobs (122, 122a) as a quantity of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available during the first operation of the distributed system minus a quantity of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) lost due to a first tolerated event during which storage resource loss occurs, the second quota, Q2, of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available to high-availability jobs (122, 122a) as: Q 2 = R N − R L R N + x ∗ R L wherein Q 2 is the second quota, Q2, R N is the quantity of the resource (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available during the first operation of the distributed system, R L is the quantity of the resource (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) lost due to the first tolerated event, and x is a resource (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) multiplier corresponding to the first tolerated event, wherein the first tolerated event is designated as tolerated when a planned maintenance or failure occurs; executing the jobs (122, 122a, 122b) on the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) of the distributed system; and constraining the usage of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) by the high-availability jobs (122, 122a) and the low-availability jobs (122, 122b) to the respective first quota, Q1, and second quota, Q2, of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436), wherein the high-availability jobs have a higher priority than the low-availability jobs. identifying high-availability jobs (122, 122a) and low-availability jobs (122, 122b) that demand a usage of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) of the distributed system, wherein the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) comprise storage resources and non-storage resources; determining a first quota, Q1, of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available to low-availability jobs (122, 122b) as a quantity of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available during a first operation of the distributed system, wherein during the first operation, the distributed system is not undergoing maintenance or failure; determining a second quota, Q2, of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available to high-availability jobs (122, 122a) as a quantity of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available during the first operation of the distributed system minus a quantity of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) lost due to a first tolerated event during which storage resource loss occurs, the second quota, Q2, of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available to high-availability jobs (122, 122a) as: Q 2 = R N − R L R N + x ∗ R L wherein Q 2 is the second quota, Q2, R N is the quantity of the resource (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) available during the first operation of the distributed system, R L is the quantity of the resource (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) lost due to the first tolerated event, and x is a resource (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) multiplier corresponding to the first tolerated event, wherein the first tolerated event is designated as tolerated when a planned maintenance or failure occurs; executing the jobs (122, 122a, 122b) on the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) of the distributed system; and constraining the usage of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436) by the high-availability jobs (122, 122a) and the low-availability jobs (122, 122b) to the respective first quota, Q1, and second quota, Q2, of the resources (110, 112, 114, 116, 422, 424, 426, 432, 434, 436), wherein the high-availability jobs have a higher priority than the low-availability jobs.