It is currently not possible to negate a condition in an IdentityQuery. This makes it impossible to perform a simple "not equals" comparison (e.g. user status is not active). It's also impossible to perform "not like" and "not in" comparisons but I'm not sure if anyone would ever need those.