I would use NCM, first by downloading the Configurations and then using Policies to look for items added in my AAA block. You could also use Realtime Change Detection to do that for any change not just new local accounts. This leverages Syslog messages as a trigger to backup and compare the configuration to the previous one.
Best Regards,
Derik Pfeffer
Loop1 Systems: SolarWinds Training and Professional Services
LinkedIN: Loop1 Systems
Facebook: Loop1 Systems
Twitter: @Loop1Systems