The controller has the ability to update items that affect the HydroDCS system itself, such as install firmware updates, setting the IP Address, etc.  There are also audit logs that can be viewed by controllers, as well as some other detailed troubleshooting functionality. Controllers also can do anything an operator can do.