Let me state this very simply: executive agencies have only the power granted to them by Congress. So yes, all actions taken by an executive agencies are bound by the law. Anything else is ultra vires and of no effect.