I think this is the central point. You can do all those things, but are you entitled to use company equipment to do so?
The term spying becomes less clear-cut in that context too. It's spying if I get your personal private communication, but monitoring one's own internal network would not normally be considered spying.