Does that change if I have multiple IAP-215 ?
I found this which suggests a virtual controller can control other devices.
http://www.arubanetworks.com/techdocs/InstantMobile/Advanced/Content/Instant%20User%20Guide%20-%20volumes/Virtual%20Controller.htm
"Virtual Controller
Aruba Instant does not require an external mobility controller to regulate and manage the Wi-Fi network. Instead, one IAP in every network assumes the role of virtual controller. It coordinates, stores, and distributes all the settings required to provide a centralized functionality to regulate and manage the Wi-Fi network. The Virtual Controller (VC) is the single point of configuration and firmware management.When configured, the virtual controller sets up and manages the VPN tunnel to a mobility controller in the data center.
The VC also functions like any other AP with full RF scalability. It also acts as a node, coordinating DHCP address allocation for network address translated clients ensuring mobility of the clients when they roam between different IAPs."