thank you to reply marcus,
I couldn’t do what you said.
and I asked Auth0 support and I got the answer that Auth0 Deploy CLI can not export/import the scopes by itself, as below.
So, I have been able to export everything, by exception of the grants that belong to the client that has been used to run the auth0-cli.
Regarding the client_id xxxauth0-deploy-cli-extension-idxxx , after investigating with internal teams, this happens due to the fact that we skip exporting of the Deploy CLI’s own client grants because they are not meant to be changed as it can lead to breaking changes.
In a scenario where you are copying one tenant’s configuration to another tenant, the new tenant should already have the Deploy CLI Tool’s Application created and setup, otherwise you won’t be able to import anything to this tenant.
so, we need the scope of cli-applciation manually for each tenant.
thanks!