diff --git a/graffiti/rbac/etcdwatcher.go b/graffiti/rbac/etcdwatcher.go
new file mode 100644
index 0000000000000000000000000000000000000000..fd85d9353a223bed247001f54805f72384402e52
--- /dev/null
+++ b/graffiti/rbac/etcdwatcher.go
@@ -0,0 +1,81 @@
+package rbac
+
+import (
+	"context"
+	"runtime"
+
+	"github.com/casbin/casbin/persist"
+	etcd "go.etcd.io/etcd/client/v2"
+)
+
+// EtcdWatcher listens for etcd events
+type EtcdWatcher struct {
+	kapi     etcd.KeysAPI
+	running  bool
+	callback func(string)
+	cancel   context.CancelFunc
+}
+
+// finalizer is the destructor for EtcdWatcher.
+func finalizer(w *EtcdWatcher) {
+	w.running = false
+	w.cancel()
+}
+
+// NewEtcdWatcher returns new etcd change watcher
+func NewEtcdWatcher(kapi etcd.KeysAPI, parent context.Context) persist.Watcher {
+	ctx, cancel := context.WithCancel(parent)
+
+	w := &EtcdWatcher{
+		kapi:    kapi,
+		running: true,
+		cancel:  cancel,
+	}
+
+	// Call the destructor when the object is released.
+	runtime.SetFinalizer(w, finalizer)
+
+	go w.startWatch(ctx)
+
+	return w
+}
+
+// SetUpdateCallback sets the callback function that the watcher will call
+// when the policy in DB has been changed by other instances.
+// A classic callback is Enforcer.LoadPolicy().
+func (w *EtcdWatcher) SetUpdateCallback(callback func(string)) error {
+	w.callback = callback
+	return nil
+}
+
+// Update calls the update callback of other instances to synchronize their policy.
+// It is usually called after changing the policy in DB, like Enforcer.SavePolicy(),
+// Enforcer.AddPolicy(), Enforcer.RemovePolicy(), etc.
+func (w *EtcdWatcher) Update() error {
+	return nil
+}
+
+func (w *EtcdWatcher) Close() {
+	w.cancel()
+}
+
+// startWatch is a goroutine that watches the policy change.
+func (w *EtcdWatcher) startWatch(ctx context.Context) error {
+	watcher := w.kapi.Watcher(etcdPolicyKey, &etcd.WatcherOptions{Recursive: false})
+	for {
+		if !w.running {
+			return nil
+		}
+
+		res, err := watcher.Next(ctx)
+		if err != nil {
+			return err
+		}
+
+		if res.Action == "set" || res.Action == "update" {
+			if w.callback != nil {
+				w.callback(res.Node.Value)
+			}
+		}
+	}
+}