Techniques are disclosed for identifying sets of network devices to which to deploy a software upgrade based on an importance to the network of each network device. For example, a network system obtains information identifying a number of instances of an application associated with network traffic forwarded by each network device of a plurality of network devices. The instances of the application are executed by client devices serviced by each network device in forwarding the network traffic. The network system assigns each network device to different upgrade groups based on the number of instances of the application, each upgrade group associated with a different relative priority. The network system deploys a software upgrade to each network device according to a priority of the respective upgrade group relative to a priority of the other upgrade groups.