there is no good reason that the roles are objects
status + devices posting to controller