You don't need controller per se to get per-user VLAN assignment or WPA Enterprise. What you need is running RADIUS server somewhere, and controller conveniently provides a basic one (it has FreeRadius underneath, but provides only basic configuration options, so you won't be able to use AD for your users; also do not edit the config manually, any update will wipe your edits).
For guest portal, you need, well, guest portal somewhere. The guest portal is a part of the controller. However, if you need guest portal, I don't see any problem running controller somewhere.
For the rest, you can also run controller on your computer once, configure everything and then shutdown the controller. All the devices will work fine without it.
Edit: word