The web server acts as a load balancer and reverse proxy for the web application servers - it is actually optional in some configurations, but you will typically see it.
You can read more details about it here.
https://go.documentation.sas.com/?docsetId=bimtag&docsetTarget=n0axzi2o0wubxan1cgaovjqqjfho.htm&docs...
the web application server runs the various java based web applications SAS provides. You do not need to provide tomcat, and the catalina.sh that's in your SAS Home path is not something you directly invoke.
https://go.documentation.sas.com/?docsetId=bimtag&docsetTarget=n0kn00ddbhus6zn18h6t4b7vn7ed.htm&docs...
covers how it's operated - if you wanted to stop/start servers individually. It's much more common to use the sas.servers script or appsrvconfig.cmd to start all of the servers (and their pre-requisites) at the same time.
the sas web app servers are a replacement for things like JBoss/WebSphere/Weblogic. See the Changes to the middle tier section here:
https://go.documentation.sas.com/?docsetId=whatsdiff&docsetTarget=n1roydrale7528n14alj43gi257f.htm&d...