Review should be aimed at whether an agency has acted within the scope of its lawful authority