According to another aspect, the exemplary embodiments provide an apparatus that is capable of configuring a secure domain (SD), in a network functions virtualisation infrastructure (NFVI). The SD is controlled by a network function virtualizations orchestrator (NFVO), and a virtualized infrastructure manager (VIM), where the NFVO and the VIM are associated with a virtualized network function manager (VNFM). The SD comprises virtual objects handling privileged information. The apparatus has a processing circuit and a memory circuit. The memory circuit has instructions executable by the processor circuit. The processing circuit, when executing the instructions, is configured to obtain, from the NFVO or the VNF manager, network service (NS) instance information of a virtual object, based on input from a party associated with the SD. The processing circuit, when executing the instructions, is also configured to search in the NS instance information, for a level of confidentiality and geographic location information. In addition, the processing circuit, when executing the instructions, is also configured to allocate the virtual object to the SD according to the geographic location information, based on the level of confidentiality and a specific role of the party, when having identified the level of confidentiality and the geographic location.

According to further aspects, the object is also achieved by a computer program and a computer program product comprising a computer-readable storage medium whereon the computer program is stored.

Examples and embodiments as described have one or more of the following advantages and preferable features:

It is advantageous that access to a SD is allowed or granted based on the specific role of the party.