VMware recommends that all accounts used for the setup have the least amount of privileges needed for the operation.

VMware recommends using single account for the whole setup, follow the Create and Configure a Single User for the Whole Setup (Inventory User also Used for vRealize Orchestrator) to configure proper account.

Note: Another option is to create two individual accounts used by the vla-service: one for vCenter Server and another one for VMware vRealize Orchestrator. In this case, follow the Setting Up Individual Accounts Needed by the vla-service for vCenter and vRealize Orchestrator explained in Appendix section.