Access Denied on FORGE?

FORGE no longer uses an AD group. Signing in through Nexus One isn't enough on its own — you also need a FORGE grant in Nexus One's Credentials system.

"You don't have access to FORGE"

You're signed in, but there's no Credentials grant for FORGE against your account at all. Contact an administrator to be added in Nexus One.

"Fixed Asset Loader requires Admin-level FORGE access"

You have a User-role grant, which covers everything in FORGE except the Fixed Asset Loader (running imports, the discrepancy report, the monthly report export). Only an Admin-role grant can use those. Contact an administrator if you need to be upgraded.

If you were just added or upgraded and still can't get in

Like the other apps in the suite, your entitlements are only re-checked on a fresh login. If you were already signed in before the change, sign out of Nexus One (which signs you out of every app at once) and sign back in.