DID Subject and Controller
Yoy may think that it is odd that a DID and subsequently the DID document actually reference two different entities. However, this is actually critical for any use case where the DID does not reference a capable adult human. In the case of a capable human adult then the DID subject and controller are the same. However, in the case of a minor, a corporation, a device, or any other entity, the DID subject is likely incapable of actually performing the controlling actions. All of these are examples of entities that need digital guardianship (a third party who accepts legal and social responsibility of the subject).
Only the DID controller can make changes to the DID document.