Is there a way I can find out who created specific user(eg. username is testuser)?  

when we use one of them

`lsuser -f username` 

`lsuser -c username` 

`finger username`

and these commands give information about normal attributes but there is no information about who created this user. 

Normally, root only (or users with root privileges) can create users. 

But is it getting stored somewhere? 

If yes then where and how can we get it? 

Also, assume that only root is creating the user, will there be an IP (or date-time information) stored for that from where someone created the user?