The following roles can be installed on separate servers or for small installations the same server.
Single Sign On
Inventory Service
vCenter Service
Update Manager
Web Client
But, is there a best practice of which roles pair together better than others and which ones should not be paired together?
Thanks
You can put all the components on one Server without any issues as long as you provide enough Storage and RAM for the Server. You can also separate the roles if you want. Some put SSO as a separate Server to connect multiple vCenter Servers too.
It all depends, how many Server you want to manage.
With a multi vCenter environment we're planning for SSO and Web Client to be on one server and shared with the multiple vCenter's.
I know the other service can be on the same server, but I'm looking for advantages and disadvantages of joining and separating the services if there are any.